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CISCO 


A  policy  change  governing  discounts  on  trade-in 
deals  may  hike  prices  on  Cisco  gear.  Page  8. 


irtte  LINUX  FAITHFUL  GATHER 


New  opportunities  for  driving  Linux  into  i 
prise  highlight  this  week's  LinuxWorld.  Page  10. 
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VoIP  standard,  so  we  conducted  the  first  public 
interoperability  test  of  SIP-based  vendor  equipment. 
Twelve  vendors  submitted  a  total  of  18  products,  but 
only  four  products  passed  all  our  tests.  Page  46 

Interoperability  issues  and  lack  of  QoS  are 

inhibiting  the  convergence  of  voice  and  data 
networks,  according  to  our  exclusive  Miercom 
survey  of  nearly  100  VoIP  vendors.  Page  52 


IETF  looks  to  promote 
firewall/VPN  harmony 


The  network  portal:  www.nwfusion.com 

Internal  net  saboteurs 
being  brought  to  justice 


BY  SHARON  GAUDIN 

An  IS  worker  is  scheduled 
to  face  federal  criminal 
charges  this  week  in  U.S.  Dis¬ 
trict  Court  in  Miami  for 
allegedly  downloading  a  virus 
into  his  employer’s  computer 
system,  crashing  the  network 
for  nearly  two  full  days. 

This  case,  which  comes  a 
little  more  than  a  year  after 
the  first  federal  criminal  pros¬ 
ecution  of  computer  sabo¬ 
tage,  is  just  one  in  a  growing 
number  of  insider-based  net¬ 


work  attacks,  according  to  fed¬ 
eral  law  enforcement  agents. 
Another  case  is  getting  ready 
to  go  to  trial  in  October  in  Las 
Vegas,  and  yet  another  was 
wrapped  up  with  a  guilty  ver¬ 
dict  this  summer  in  New 
Hampshire. 

The  U.S.  Secret  Service, 
which  splits  its  focus  between 
protecting  heads  of  state  and 
conducting  criminal  investiga¬ 
tions,  is  handling  twice  as 
many  cases  that  involve  insider 
attacks  as  just  a  year  ago,  says 
See  Court,  page  75 


The  high  price  of 
computer  crime 

The  Computer  Crime 
and  Security  Survey* 
shows  that  the  cost 
of  security  breaches 

is  on  the  _ 

rise. 


*The  study  surveyed 
538  security  adminis¬ 
trators  from  industry, 
government  and 
academia. 
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BY  TIM  GREENE  AND 
ELLEN  MESSMER 

One  of  the  annoying  aspects 
of  implementing  VPNs  —  get¬ 
ting  them  to  work  across  cor¬ 
porate  firewalls  —  could  be 
resolved  soon  based  on  work 
by  the  Internet  Engineering 
Task  Force. 

During  its  recent  meeting  in 
London,  the  standards-setting 
body  reviewed  a  proposed 
standard  for  network  address 
translation  (NAT)  that  would 
spell  out  how  IP  Security 
(IPSec)  VPN  tunnels  should  tra¬ 


verse  firewalls  and  other  NAT 
devices. 

Ideally,  firewalls  and  VPNs 
complement  each  other,  with 
firewalls  blocking  intrusion 
from  the  Internet  and  VPNs  pro¬ 
viding  a  way  to  extend  secure 
encrypted  tunnels  across  the 
Internet  to  connect  network 
devices.  But  sometimes,  fire¬ 
walls  and  VPNs  don’t  work  well 
together,  especially  when  differ¬ 
ent  vendors  make  the  VPN 
equipment. 

Take  the  case  of  Bell  Can¬ 
ada,  where  employees  use  the 
See  Harmony,  page  14 


The  flip  side  of  ‘What  end  users  hate . . 


BY  JENNIFER  MEARS  AND  KATHLEEN  OHLSON 


i  J  been  a  month  since  we  published  a  list  of 
'  f  rj  the  top  complaints  end  users  have  about  IT 

_ i  L)  departments,  and  your  reactions  are  still 

pouring  in.  Seems  we  touched  a  nerve. 

Among  those  reactions  was  a  request  for  the  other 
side  of  the  story:  "Too  bad  /// 

'What  end  users  hate  about 


you'  doesn't  contain  some  examples  of  how  good . . . 
departments  do  it  right,"  says  Phil  Roy  in  a  letter  to 
Network  World  (see  page  44).  "My  company's  IT 
group  is  outstanding  and  very  responsive." 

We,  too,  like  to  think  of  ourselves  as  responsive.  So 
we  talked  to  end  users  again,  this  time  asking  them 
what  they  most  love  about  their  IT  colleagues.  Enjoy. 
See  Love,  page  76 


MICHELLE  BARBCRA 


To  be  a  contender  in  the  new  Customer  Economy,  you 
need  to  put  the  customer  at  the  center  of  your  business. 
Avaya's  networks  and  applications  do  just  that. 

Our  Enterprise  Class  IP  Solutions  (ECLIPS)  is  a  family 
of  IP  telephony  and  multiservice  network  solutions  and 
services  that  supports  our  new  generation  of  applications 
while  giving  you  a  no-compromise  approach  to  convergence. 
So  voice,  video  and  data  collaborate  to  deliver  a  richer 
customer  experience.  With  no  compromise  to  the  quality, 
the  reliability  or  the  feature-functionality  you've  come  to 
demand  from  your  networks. 

Our  solutions  are  interoperable  with  your  existing 
infrastructure,  making  it  easier  to  build,  expand, 
manage  and  monitor  enterprise  networks.  Our  IP  telephony 
solutions  deliver  outstanding  voice  quality  and  our  Cajun™ 
family  of  gigabit  Ethernet  switches  are  voice  ready  today. 

Power  your  network  with  Avaya,  and  your  customers 
become  the  real  focus  of  your  business.  And  they’ll  know  it. 
Call  866-GO-AVAYA  today  or  visit  avaya.com/eclips 


Compaq  is  abandoning  their  Alpha  chip 
for  a  new,  unproven  platform. 

Don’t  worry,  it’s  just  your  business. 
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Forced  migrations  are  never  fun.  Especially  when  you’re  forced  to  migrate  to  an  unproven  platform.  Don’t  be  a  test  site 
for  the  first-generation  Itanium  chipset.  Switch  to  Sun’s  third-generation  64-bit  SPARC™  platform.  SPARC,  along  with  the 
Solaris™  Operating  Environment- the  #1  UNIX®  platform,  is  battle-tested  for  maximum  uptime  of  your  mission-critical 
applications.  Plus,  more  applications  are  available  for  the  Solaris  OE  than  for  either  Alpha  or  Itanium.  And  you  can  run  those 
applications  on  anything  from  our  sub-$l,000  server  to  a  massive  64-way  mainframe-class  machine  (can’t  do  that  with 
Itanium),  giving  you  an  architecture  that  is  both  cost-efficient  and  powerful.  Worried  about  your  existing  investment? 
No  problem.  The  Solaris  OE  can  integrate  seamlessly  into  your  existing  architecture,  so  there  are  no  changes  to  your  applications 
and  no  retraining  of  resources.  And  to  make  the  switch  even  easier,  migrate  now  to  take  advantage  of  our  aggressive 
Alpha  trade-in  program.  For  details,  visit  www.sun.com/alpha. 
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8  Trade-in  program  change  may  hike  cost  of 

Cisco  gear. 

10  Linux  barreling  deeper  into  the  enterprise. 

12  WorldCom  and  AT&T  gearing  up  prioritization 
capabilities  for  data  services. 

12  Passlogix  claims  new  twist  on  single  sign-on. 

14  Nokia  boosts  virtual  private  network  features. 

16  Novell  links  metadirectory,  provisioning  software. 
75  Ghost  accounts:  An  avenue  to  network  sabotage. 

Infrastructure 

19  CEO  Jack  Messman  examines  state  of  Novell. 

19  Ecutel  supports  wireless  roaming. 

20  Dave  Kearns:  Attitude  problems  abound  at  Microsoft. 

SPECIAL  FOCUS:  HIGH-SPEED  WIRELESS.  UWB 
could  be  faster,  less  expensive  than  wireless  LANs.  Page  22. 


Cisco's  Catalyst  6513  could 
cost  more  as  a  result  of 
changes  to  a  trade-in  program. 


Net. Worker 

25  Teleworking  Top  10:  Home  office  ergonomics  made  easy. 

Carriers  &  ISPs 

27  Digital  Island  provides  needed  boost  to  GameStop.com. 

27  NextWave  won't  let  spectrum  dispute  delay  network  buildout. 

28  Johna  Till  Johnson:  How  'the  matrix'  can  win  you  boffo  reviews. 

The  Edge 

31  RouteScience  adds  twist  to  'Net  routing. 


U4EA's  FlowFusion  helps 
control  packet  flow. 


Pape 


In  our  test  of  SIP  interoperability, 
all  the  vendors  passed  the  basics, 
but  things  got  dicey  when  we 
went  to  tests  of  advanced  features 

Page  46 


H. 323  Version  2  is  the  most  popular 
standard  for  VoIP  gear,  with  MGCP 
coming  in  second  and  SIP  third, 
based  on  our  survey  of  nearly  100 
vendors.  However,  looking  one  year 
ahead,  SIP  is  expected  to  emerge  as 
the  most  widely  supported 
standard.  Page  52 


Review 


Mazu’sTrafficMaster  Inspector  does  a 
good  job  identifying  denial-of-service 
attacks,  but  doesn't  help  you  fight  off  the  ^ 
attack.  For  that  you’ll  need  Mazu’s  Enforcer, 
which  is  slated  to  ship  in  September.  Page  55 
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32  Vendors  see  network  equipment  sales  plummet. 
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58  Controlling  project  creep:  Workforce  management  software 
helps  IT  track  costs,  projects  and  staffing  requirements. 
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The  lowest  TCO 
in  the  storage  industry? 

EMC,  FYI. 


We’re  doing  more  than  anyone  else  in  the  industry  to  lower  the 
Total  Cost  of  Ownership  of  storage  infrastructure. 


To  see  actual  case  studies  that  show  how  we’re  accomplishing 
that,  check  out  www.EMC.com/goodnews 
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FORUMS 

MPLS  and  IP 

A  reader  needs  some  advice:  Stick  with  ATM  or  move  to  Multi-protocol 
Label  Switching  and  IP?  What  do  you  think?  DocFinder:  5734 

IBM  and  Linux 

Could  IBM's  Linux  efforts  increase  tension  between  IBM  and  the  open 
source  community?  Read  our  Aug.  14  story,  then  discuss.  DocFinder:  5735 

Microsoft  offers  two  new  security  tools 

But  Dave  P.,  our  forum  aficionado,  says  Microsoft  is  still  years  behind 
everyone  else.  Do  you  agree?  DocFinder:  5736 

Relooping  computer 

A  reader  has  trouble  with  Windows  2000  continually  restarting  itself.  Any 
advice?  DocFinder:  5745 


MEWS 

Getting  broadband  abroad 

Read  about  how  to  get  your  overseas  workers  high-speed  Internet 
service.  DocFinder:  5737 

Sigma  Networks 

The  metropolitan  network  provider  is  offering  a  new  high-availability 
wavelength  service  for  its  carrier,  service  provider  and  large  enterprise 
customers.  DocFinder:  5738 


CARUSO'S  CACHE 

The  best  of  the  NetFlash  daily  newsletter 

Microsoft  supporters  raised  from  the  dead 

Some  say  Microsoft  supporters  are  stiffs  —  and  in  at  least 
a  couple  of  cases,  they  would  be  right.  Of  400  letters  sent  to 
the  Utah  attorney  general  asking  that  the  government  go  easy 
in  its  antitrust  case  against  Microsoft,  two  were  signed  by 
dead  Utah  citizens.  But  what  really  bothers  me  about  the 
news  is  Microsoft’s  ungrateful  attitude  about  the  whole  thing; 
a  spokesman  called  it  "hardly  a  surprise."  Do  they  think  it's 
easy  to  return  from  the  dead?  To  show  their  support,  these 
people  have  made  the  supreme  sacrifice,  disturbing  their 
Eternal  Rest  to  come  back  to  —  of  all  places  —  Utah.  I  think 
Microsoft  owes  its  users  an  acknowledgement  of  such 
incredible  devotion.  DocFinder:  5749 

Experts  call  MPLS  bad  for  'Net 

It  has  been  more  than  two  weeks  since  Network  World  ran 
its  story  on  Multi-protocol  Label  Switching  (MPLS)  —  and  yet 
many  of  you  continue  to  read  the  story  online.  In  fact,  it's  still 
one  of  Fusion's  top  five.  Obviously,  MPLS  has  gained  enough 
of  a  following  at  this  point  that  the  few  negative  comments 
from  MPLS  experts  included  in  the  story  have  caused  quite  a 
stir.  Check  out  the  story  yourself,  if  you  haven't  already,  and 
see  what  all  the  fuss  is  about.  DocFinder:  5750 

Server  blades,  Itanium  at  Intel  Developer  Forum 

Network  World  takes  a  peek  at  some  of  the  technologies  to 
be  showcased  this  week  at  the  Intel  Developer  Forum  in  San 
Jose.  Hint:  Expect  news  on  server  blades,  those  thin  servers 
that  allow  users  to  really  pack  'em  in.  DocFinder:  5751 

Gartner:  Don't  overspend  on  application  server  technology 

Looking  to  save  money  on  IT  equipment  costs?  Start  with 
application  servers,  Gartner  says.  Companies  have  overspent 
about  a  billion  dollars  on  such  products,  which  often  provide 
features  you  don't  really  need.  DocFinder:  5752 

—  Jeff  Caruso,  managing  editor,  online  news 

Sign  up  for  this  e-mail  newsletter  online.  DocFinder:  3850 
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Marked  decline 

The  second  quarter  saw  sales  drop  across  the  board  for  most  networking 
equipment  tailored  to  service  providers.  DocFinder:  5739 


4 


Best  Bets 

Want  to  know  the  most-read  articles  online?  What  not  to  miss? 
Check  out  our  new  Best  Bets  on  NW  Fusion.  DocFinder:  5741 

Getting  NetSmart 


Compendium 

Clever  hackers 

Fusion  Executive  Editor  Adam  Gaffin  discovers 
researchers  who  think  it's  not  all  that  hard  to 
crack  the  encryption  at  the  heart  of  802.1 1  wireless 
networks.  DocFinder:  5742 

Help  Desk 

Checking  cable -modem  providers 

Help  Desk  Columnist  Ron  Nutter  advises  a  reader  on  how  to 

solve  his  tricky  Web  Server  problems.  DocFinder:  5743 


Accelerate  your  learning  from  the  convenience  of  your  own  com¬ 
puter.  Save  S300  on  any  Global  Knowledge  online  course,  including 
management  and  leadership  training  as  well  as  Cisco  and 
Microsoft  certifications.  DocFinder:  5740 


View  from  The  Edge 

‘Father’  knows  best 

Read  why  one  of  the  "fathers"  of  the  Internet  says  'Net  traf¬ 
fic  is  growing  faster  than  ever.  DocFinder:  5744 
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We've  made  it  easy  to  access  articles  and  resources  online.  Simply  enter  the  four-digit  DocFinder 
number  in  the  search  box  on  the  home  page,  and  you'll  jump  directly  to  the  requested  information. 
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Three  directors  exit  Exodus 

Buy-out  rumors  are  swirling  around  Exo¬ 
dus  Communications  again,  this  time  after 
the  resignation  of  three  members  of  the  Web 
hosting  firm’s  board 
of  directors.The  once- 
high-flying  company 
that  has  been  grap¬ 
pling  with  cash  prob¬ 
lems  announced  last 
week  that  Mark  Dub- 
ovoy,  managing  part¬ 
ner,  Leapfrog  Ven¬ 
tures;  Thadeus  J.  Mo- 
carski,  managing  dir¬ 
ector,  Navis  Partners; 
and  Naomi  Seligman, 
senior  partner,  Cassius 
Advisors,  were  leav¬ 
ing.  The  company  said  they  were  leaving  for 
personal  reasons,  although  USA  Today 
reported  that  the  parting  stemmed  from  a 
conflict  about  the  company’s  future. The  arti¬ 
cle  also  brought  up  the  prospect  of  a  buy¬ 
out,  with  CEO  Ellen  Hancock  quoted  as  say¬ 
ing, “In  today’s  environment,  if  a  company  did 
come  forward  with  an  attractive  offer,  the 
burden  would  be  on  us  and  our  board  to  look 
closely  at  it.“ 

Survey:  AOL  least  trustworthy  on 
Net 

As  Internet  titans  Microsoft  and  AOL  Time 
Warner  go  head-on  in  their  battle  over  mar¬ 
ket  share,  a  report  released  last  week  by  Gart¬ 
ner  indicates  that  Microsoft  has  the  advan¬ 
tage  in  at  least  one  key  respect:  consumer 
trust.  AOL  was  rated  the  least-trusted  com¬ 
pany  on  the  Internet  compared  with  banks, 
brokerages,  large  retailers,  credit  card  compa¬ 
nies,  Amazon.com  and  Microsoft,  according 
to  the  survey  of  online  adult  consumers.  In 
fact,  37%  of  respondents  gave  AOL  very  poor 
marks  in  terms  of  trust,  whereas  29%  of  those 
polled  said  they  were  distrustful  of  Micro¬ 
soft.  At  the  other  end,  17%  of  those  surveyed 
said  they  have  a  high  level  of  trust  in  Micro¬ 
soft,  while  15%  said  the  same  of  AOL. 

Online  sales  grow  despite 
slow  economy 

Online  sales  in  the  U.S.  are  continuing  to 
grow,  with  almost  $4  billion  of  U.S.  business 
conducted  on  the  Web  in  July,  according  to 
research  from  Forrester  Research.  Total  U.S. 
online  spending  increased  from  $3-2  billion 
in  June  to  $3. 98  billion  in  Julv.The  number  of 
households  shopping  online  increased  to 
14.7  million  from  13-1  million  in  June, 
according  to  a  report  from  Forrester.  The 
most  popular  low-priced  products  are 
clothes,  toys,  video  games  and  books,  fol¬ 
lowed  by  health  and  beauty  products,  music 
and  software.  More  expensive  items  include 
airline  tickets,  hotel  reservations,  computer 
hardware  and  consumer  electronics. 


Lucent  reports  progress 

Struggling  telecommunications  equipment 
manufacturer  Lucent  is  on  track  to  complete 
the  second  phase  of  its  restructuring  plan  and 
has  a  new  product  and  organizational  strategy' 
to  complement  that  plan,  the  company  said 
last  week.  Lucent  sees  the  telecommunica¬ 
tions  industry  reorganizing  aroimd  fixed-line 
and  wireless  service,  as  well  as  global  mar¬ 
kets,  and  will  restructure  the  company  ac¬ 
cordingly  with  three  tiers  of  focus,  says  Bill 
O’Shea,  executive  vice  president  of  corporate 
strategy  and  business  development.This  reor¬ 
ganization  will  make  the  company  smaller 
and  leaner,  he  says.  Lucent  will  focus  the 
majority  of  its  busi¬ 
ness  on  its  top  30 
customers,  com¬ 
panies  in  20  coun¬ 
tries  worldwide 
that  are  responsible 
for  roughly  75%  of 
Lucent’s  revenue, 

O’Shea  says.  The 
company  will  put 
the  bulk  of  its 
research  and  devel¬ 
opment  and  sales 
efforts  in  this  area 
to  better  serve  its 
top  customers. 

Microsoft  reveals  XP  pricing 

Microsoft  last  week  announced  the  pricing 
for  its  Windows  XP  operating  system.  The 
company  will  release  two  versions  of  Win¬ 
dows  Xft  one  for  consumers  and  one  for  cor¬ 
porate  users,  for  $199  and  $299,  respectively. 
The  upgrade  version  of  the  Home  Edition  will 
cost  $99,  while  the  upgrade  version  of  the 
Professional  Edition  will  cost  $199.  Windows 
XP  will  be  launched  worldwide  Oct.  25, 
according  to  Microsoft. 

HP  has  a  'huge  bet'  on  Itanium 

A  top  Hewlett-Packard  executive  last 
week  signaled  his  company’s  commitment 
to  Intel’s  Itanium  processor  in  perhaps  the 
strongest  terms  yet,  saying  the  company  has 
laid  a  “huge  bet”  on  Intel’s  family  of  64-bit 
chips.  “In  a  very  real  sense,  HP  has  moved 
the  company  behind  IA-64,”  said  Richard 
DeMillo,  HP  vice  president  and  CTO,  in  a 
speech  at  the  HP  World  conference.  “I 
would  hesitate  to  say  we  bet  the  company 
on  it,  but  if  truth  be  told,  we  have  put  a 
huge  bet  behind  IA-64.”  HP  engineers 
worked  closely  with  Intel  to  develop  Itani¬ 
um,  which  will  be  offered  by  a  variety  of 
vendors  in  servers  designed  to  compete 
with  more  established  —  and  often  more 
expensive  —  proprietary  Unix  systems 
from  the  likes  of  Sun.  Itanium  systems 
began  rolling  out  earlier  this  year,  and  ana¬ 
lysts  say  they  expect  demand  to  pick  up 
gradually  during  the  coming  year. 


Exodus  CEO  Ellen 
Hancock  says  the 
company  would 
"look  closely"  at  an 
attractive  offer. 


Lucent  executive  vice 
president  Bill  O'Shea 
is  looking  to  make  the 
company  smaller  and 
leaner. 


Trade-in  program  change 
may  hike  cost  of  Cisco  gear 


BY  JIM  DUFFY 

SAN  JOSE  —  In  a  move  that 
could  hike  prices  for  cus¬ 
tomers,  Cisco  is  eliminating  a 
key  component  of  its  trade-in 
program  covering  competitive 
equipment. 

Cisco  last  week  ended  prede¬ 
termined  discounts  for  resellers 
under  its  Competitive  Technol¬ 
ogy  Migration  Program  (CT- 
MP),  according  to  an  internal 
e-mail  obtained  by  Network 
World.  Channel  partners  used 
the  CTMP  calculator  to  prede¬ 
termine  trade-in  discounts  and 
would  use  the  precalculated 
discounts  to  negotiate  sales 
deals  with  end  users. 

Instead,  Cisco  will  review 
and  determine  discounts  for 
competitive  replacement  op¬ 
portunities  on  a  “case-by-case 
basis,”  which  means  discounts 
awarded  to  resellers  will  fluctu¬ 
ate,  as  will  follow-on  prices  to 
enterprise  and  service  provider 
end  users. 

The  Cisco  e-mail  also  said 
resellers  can  no  longer  offer 
preset  pricing  to  customers 
when  trading  in  existing  Cisco 
equipment.  All  trade-in  credits 


Users  may  be  paying  more  for  a 
Catalyst  6513  under  Cisco's 
revamped  trade-in  program. 


offered  on  Cisco  equipment 
will  require  the  prior  approval 
of  a  Cisco  sales  employee. 

“This  will  allow  us  to  pre¬ 
serve  our  margin  and  create 
better  opportunities  to  sell 
value  into  our  installed  base  of 
accounts,”  wrote  Rick  Justice, 
Cisco  senior  vice  president  of 
World  Field  Operations,  in  the 
e-mail. 

Cisco  is  making  the  changes 
because  some  resellers  report- 
See  CTMP,  page  76 


Cisco  restructures  around 
1 1  core  technologies 


BY  JIM  DUFFY 

SAN  JOSE  —  Cisco  last 
week  announced  a  sweeping 
reorganization  that  eliminates 
its  line  of  business  structure 
and  replaces  it  with  a  central¬ 
ized  engineering  and  market¬ 
ing  effort  around  11  technol 
°gy  groups. 

Cisco  also  shuffled  its  execu¬ 
tive  lineup,  resurrecting  a  for¬ 
mer  enterprise  chief  to  lead 


Correction 

■ 

In  the  story  "Shopping 
with  peripheral  vision" 
(Network  World,  Aug.  13),  a 
chart  listed  speeds  as  byte/ 
sec.  The  speeds  should  all 
be  bit/sec. 


development  and  bidding  adieu 
to  the  head  of  its  service 
provider  business. 

Cisco  is  eliminating  its  three 
lines  of  businesses  —  enter¬ 
prise,  service  provider  and  com¬ 
mercial  —  to  focus  develop¬ 
ment  and  marketing  on  the  1 1 
technology  areas,  which  in¬ 
clude  Access,  Aggregation,  Core 
Routing,  Cisco  IOS,  Optical, 
Storage,  Voice  and  Wireless, 
among  others. 

“Cisco  is  evolving  its  organi¬ 
zation  to  meet  the  evolving 
needs  of  our  customers  and  the 
market  segments  we  address,” 
says  James  Richardson,  formerly 
senior  vice  president  of  the 
Cisco’s  enterprise  line  of  busi¬ 
ness,  who  is  now  Cisco’s  chief 
marketing  officer.  “What  we’ve 
seen  is  the  requirements  for 
technology  are  transiting  mar- 
See  Cisco,  page  10 
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Linux  barreling  deeper  into  the  enterprise 


BigStorage  s  K2  network-attached  storage 

BigStorage  has  added  data  replication,  failover  and  snapshot 
backups  to  its  storage  device. 

•  Up  to  40  terabytes 
capacity 

•  NFS.  CIFS  and 
AppleTalk  support 

•  Flotswap  drives, 
power  supplies 
and  fans 


BY  DEM  CONNOR 

5,47V  FRANCISCO  —  Linux 
takes  a  step  deeper  into  the 
enterprise  this  week  at  the 
Linux  World  conference  when  a 
slew  of  vendors  trot  out  new 
products  that  are  said  to  be 
more  comprehensive,  powerful 
and  fault-tolerant. 

Among  the  show’s  scheduled 
announcements: 

•  IBM  will  roll  out  two 
rugged  carrier-grade  servers 
for  telephone  companies  and 
data  centers. 

•  Hewlett-Packard  said  it  will 
tout  its  own  version  of  Linux, 
suitable  for  telcos  and  large 
enterprise  deployment. 

•  Mission  Critical  Linux  will 
launch  software  that  can  cluster 
as  many  as  128  servers  for 
failover. 

•  BigStorage  will  announce 
that  its  network-attached  stor¬ 
age  device  can  perform  snap¬ 
shot  backups,  failover  and  repli¬ 
cation  of  data. 

•  Sistina  Software  will  unveil 
a  new  version  of  its  Linux  global 
file  system  for  clustered  servers. 

While  many  Linux  users  say 
the  operating  system  has  been 
ready  for  the  enterprise  for 
some  time,  its  adoption  for  crit¬ 
ical  business  applications  has 
been  slow.  Analysts  see  that 
changing. 

“Linux  is  moving  more  quick¬ 
ly  into  the  mainstream,”  says 
Stacy  Quandt,  an  analyst  with 
Giga  Information  Group. 
“There’s  a  real  focus  on  Linux 
clusters  and  high-availability  sys¬ 
tems,  and  storage-area  net¬ 
works.” 

IBM  is  pushing  Linux  into  tel¬ 
cos  and  data  centers  with  the 
introduction  of  two  new  Linux- 
based  servers.  Called  the  xSeries 
300  DC  and  330  DC,  these  1-U 
(1.75-inch)  servers  use  48-volt 
DC  power  commonly  found  in 
larger  installations. 

“Everything  in  central  offices 
has  always  been  DC-powered,” 
says  Ikhlaq  Sidhu,  CTO  for  Gam¬ 
bia  Networks,  a  wireless  infra¬ 
structure  provider  in  Chicago.“A 
vendor  cannot  sell  into  this  envi¬ 
ronment  without  DC-powered 
equipment.  It’s  not  just  a  pre¬ 
ferred  method;  it’s  required.” 

Each  server  ships  with  the 
Linux  operating  system  and  IBM 
Director,  IBM  ServerGuide  and 
Lightpath  Diagnostics.  IBM  Dir¬ 
ector  is  systems  management 
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software;  ServerGuide  allows 
simplified  configuration.  Light- 
path  Diagnostics  pinpoints 
hardware  problem  spots.  Avail¬ 
able  now,  the  servers  start  at 
$1,300. 

HP  is  developing  a  version  of 
Linux  called  HP  Secure  OS  Soft¬ 
ware  for  Linux,  which  focuses 
on  enhanced  security  for  telcos 
and  large  companies.  The  com¬ 
pany  will  sell  Secure  OS  for 
about  $3,000  per  server. 

Mission  Critical  Linux  is  bulk¬ 
ing  up  its  enterprise  characteris¬ 
tics  with  the  introduction  of  an 
up  to  128-node  cluster  of  com¬ 
puters  for  telecommunications, 
financial,  scientific  or  aviation 
environments,  places  where 
downtime  is  not  acceptable. 

Each  clustered  server  can  be 
configured  to  fail  over  for  an¬ 
other  server  in  the  event  of  sys- 


Cisco, 

continued  from  page  8 

kets.What  our  [former]  organi¬ 
zational  structure  had  done  is 
create  a  lot  of  overlap  in  tech¬ 
nology  developments.” 

It  also  created  a  lot  of  suc¬ 
cess.  Under  the  line  of  business 
structure,  Cisco  grew  from  $6.4 
billion  in  revenue  in  fiscal  year 
1997  to  $22.3  billion  in  fiscal 
year  2001. 

In  addition  to  Richardson’s 
new  post  —  he  will  continue  to 
report  to  CEO  John  Chambers 
—  other  executive  changes 
include  the  return  of  Mario  Maz- 
zola,  former  senior  vice  presi¬ 
dent  of  Cisco’s  new  business 
ventures  group.  Mazzola,  who 
“retired”  in  mid-2000  as  senior 
vice  president  of  the  enterprise 
line  of  business  and  was  re¬ 
placed  by  Richardson  (www. 
nwfusion.com,  DocFinder: 
5755),  has  been  named  chief 
development  officer,  reporting 
directly  to  Chambers. 

“He  never  retired,”  Richard¬ 
son  says.  “What  he’s  been  doing 
is  leading  an  incubation  effort 
for  us.  He  and  his  team  were 
doing  this  incubation  effort 
called  new  business  ventures. 
They  all  stayed  as  employees  of 
Cisco.” 

Mazzola  will  oversee  the  1 1 


tern  failure.  Called  Convolo  Net- 
Guard,  the  cluster  is  primed  to 
avoid  any  latency  or  network 
downtime.  Interruptions  in  ser¬ 
vice  when  a  failure  occurs 
amount  to  microseconds,  the 
company  claims.  Convolo  Net- 
Guard  is  managed  from  a  Web- 
based  interface. 

To  prepare  its  hardware  for 
enterprise  deployment,  Linux 
storage  vendor  BigStorage  is 
adding  fault-tolerant  software 
for  disaster  recovery  to  its  K2 


new  technology  groups  that 
comprise  Cisco’s  entire  engi¬ 
neering  organization.  Other 
executive  changes  include: 

•  Charlie  Giancarlo,  formerly 
senior  vice  president  of  the 
commercial  line  of  business,  will 
run  four  of  the  technology 
groups  and  report  directly  to 
Mazzola. 

•  Michelangelo  Volpi,  for¬ 
merly  chief  strategy  officer, 
will  be  in  charge  of  the  largest 
technology  area,  Internet 
Switching  and  Services,  report¬ 
ing  to  Mazzola. 

•  Kevin  Kennedy,  formerly 
senior  vice  president  of  the  ser¬ 
vice  provider  line  of  business, 
will  be  leaving  Cisco  to  pursue 
other  opportunities. 

During  his  eight  years  at 
Cisco,  Kennedy  has  been  re¬ 
sponsible  for  leading  Cisco’s 
strategy  to  migrate  service 
provider  networks  from  time- 
division  multiplexing  to  packet 
switching.  However,  his  success 
has  been  limited:  Although 
Cisco  now  derives  almost  half 
its  revenue  from  service  pro¬ 
viders,  packet  telephony  has 
been  slow  to  take  hold  in  ser¬ 
vice  provider  networks;  Cisco’s 
presence  and  influence  in 
incumbent  local  exchange  carri¬ 
ers  and  regional  Bell  operating 
companies  networks  is  scant; 


network-attached  storage  (NAS) 
system.  The  fail-over  software, 
which  is  $2,000  for  two  nodes, 
lets  one  server  fail  over  to  the 
other  in  the  event  of  system 
problems.  Pricing  for  the  soft¬ 
ware  that  lets  data  be  replicated 
to  another  local  or  remote  NAS 
system  is  not  available. 

BigStorage  is  also  offering 
snapshot  back-up  capability  for 
$1,000,  in  which  point-in-time 
copies  of  data  on  the  disk  are 
taken  for  disaster  recovery  pur- 


and  Juniper  Networks  went 
from  0%  to  35%  market  share  in 
Internet  routers  in  five  years  at 
Cisco’s  expense. 

Indeed,  Cisco  seems  to  be  de¬ 
emphasizing  its  service  pro¬ 
vider  operations  with  this  re¬ 
structuring.  In  addition  to 
Kennedy’s  departure,  there  is 
not  a  service  provider  executive 
with  a  direct  line  report  to 
Chambers  within  the  top  ranks 
at  Cisco. 

“No  matter  what  Cisco  or 
Chambers  says,  this  move  cre¬ 
ates  the  perception  that  Cisco  is 
not  fully  committed  to  becom¬ 
ing  a  top-three  player  in  com¬ 
munications  equipment  mar¬ 
kets,  including  optical  and  3G 
wireless,  or  organized  to  directly 
serve  and  support  service  pro 
viders,”  says  Bill  Lesieur,  director 
of  Technology  Business  Re¬ 
search.  “There  will  no  longer  be 
one  senior  executive  responsi¬ 
ble  and  accountable  for  grow¬ 
ing  the  service  provider  busi¬ 
ness,  which  is  the  most  critical 
component  of  Cisco’s  long-term 
growth  strategy.” 

Referring  to  Cisco’s  enter¬ 
prise-heavy,  top  management 
structure,  Richardson  says: 
“There’s  nothing  to  be  read 
into  that.  The  catalyst  of  all  of 
this  is  Kevin  [Kennedy]  decid¬ 
ing  to  leave  the  company.  As  a 


poses.  All  products  will  be  avail¬ 
able  in  September. 

Sistina  is  previewing  its  clus¬ 
tered  file  system  for  Linux, 
which  lets  up  to  256  Linux 
servers  share  networked  stor¬ 
age.  Global  File  System  4.2 
includes  improved  transfer  of 
data  over  IP-based  networks 
and  support  for  MMAP  (mem¬ 
ory  map),  which  lets  memory 
from  individual  servers  be 
combined  into  a  virtual  pool 
and  shared. 

Also  at  LinuxWorld: 

MandrakeSoft  will  roll  out  a 
version  of  Mandrake  Linux  PPC 
8.0.  It  includes  updated  ver¬ 
sions  of  several  popular  pro¬ 
grams,  such  as  KDE  2.2  and 
GNOME  1.4,  as  well  as  the 
Linux  2.4  kernel,  secure  Telnet, 
support  for  the  Lightweight 
Directory  Access  Protocol  and 
Secure  Remote  Shell  capability. 
PPC  8.0  also  supports  machines 
with  up  to  four  processors. 
Available  now,  Mandrake  Linux 
is  $10.3 


result,  John  [Chambers]  took  a 
look  at  his  executive  team  and 
said,  ‘Well,  if  I’m  going  to 
change  to  a  functional  organi¬ 
zation,  I  might  as  well  do  it 
now.’ We  tried  to  keep  Kevin 
and  offer  him  different  posi¬ 
tions  to  keep  him  interested, 
but  he  decided  to  leave.”  3 


This  week's  question: 


Which  U.S. 
Representative  is  chief 
sponsor  of  a  bill  called 
the  Internet  Freedom 


and  Broadband 
Deployment  Act 
of  2001? 
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News 


Passlogix  software  to  simplify  single  sign-on  setup 


BY  JOHN  FONTANA 

NEW  YORK  —  The  quest  to 
boil  down  user  passwords  to  a 
single  secret  code  for  network 
and  application  access  has 
always  included  one  condition: 
IT  must  set  up  a  dedicated 
server  for  the  task. 

But  Passlogix  is  out  to  change 
that.  The  company  last  week 
released  the  latest  version  of  its 
V-GO  Single  Sign  On  (SSO)  soft¬ 
ware  that  features  integration 
with  directories  based  on  the 
Lightweight  Directory  Access 
Protocol. 

The  result  is  that  now  IT 
executives  can  develop  a  so- 
called  single  sign-on  capability 


for  their  users  without  having  to 
set  up  a  centralized  infrastruc¬ 
ture  to  handle  the  task. 

“The  strength  of  this  software 
is  in  the  client,”  says  Peter  Lind- 
strom,  a  Hurwitz  Group  analyst. 
“And  with  the  addition  of  the 
directory  it  is  easier  to  manage.” 

V-GO  SSO  works  from  a 
user’s  desktop  by  keeping  an 
encrypted  file  of  access  cre¬ 
dentials  for  every  system  avail¬ 
able  to  that  user.  The  software 
is  activated  when  a  user  logs 
on  to  his  or  her  machine.When 
that  user  subsequently  tries  to 
log  on  to  a  network  or  applica¬ 
tion,  V-GO  SSO  intercepts  the 
logon  request,  grabs  the  appro¬ 
priate  credentials  from  its  pro¬ 


file  store  and  serves  it  to  the 
requesting  system. 

Users  need  only  remember 
their  desktop  logon  password,  a 
feature  that  Passlogix  says  will 
reduce  forgotten  passwords  and 
calls  to  the  help  desk. 

Also,  users  can  store  pass¬ 
words  to  Web  sites  and  business 
partner  systems  that  are  beyond 
the  corporate  firewall,  and  for 
applications  hosted  by  a  service 
provider.  Those  are  services  can 
be  difficult  to  duplicate  on  a 
centralized  system  such  as  those 
from  Computer  Associates,  IBM, 
Netegrity,  Oblix  or  Securant. 

The  architecture  also  means 
IT  does  not  have  to  write  scripts 
or  connectors  that  foster  syn¬ 


chronization  between  a  central¬ 
ized  single  sign-on  server  and 
resources  available  to  a  user. 

“The  primary  use  here  is  to 
help  end  users  better  manage 
their  own  security,  their  own 
passwords  and  single  sign-on,” 
Lindstrom  says. 

With  the  addition  of  direc¬ 
tory  support,  IT  can  replicate 
the  user  profiles  to  a  centralized 
directory,  which  lets  users  roam 
between  laptops  and  desktops, 
share  machines  and  work  in  a 
disconnected  mode.  Users  can 
access  the  directory  and  cache  a 
copy  of  their  profile  on  the 
machine  they  are  using.The  pro¬ 
file,  tied  to  the  user  by  a  pair  of 
encryption  keys,  disappears 


when  the  user  logs  off.  The 
directory  also  can  be  used  to 
enforce  policies  such  as  requir¬ 
ing  users  to  change  passwords 
every  30  days. 

Passlogix  says  V-GO  SSO  lets 
IT  use  stronger  desktop  authen¬ 
tication,  such  as  smart  cards  and 
biometrics.  Initially,  Passlogix 
will  support  iPlanet’s  Directory 
Server,  but  will  add  support  for 
Novell’s  eDirectory  by  October 
and  Microsoft’s  Active  Directory 
before  year-end. 

Novell  has  been  reselling  the 
software  for  the  past  year  and 
sells  it  under  the  name  Novell 
SSO  with  V-GO. 

V-GO  SSO  3-0  is  available 
now  and  costs  $70  per  user. 


AT&T,  WorldCom  set  to  support  priority  data  services 


BY  DENISE  PAPPALARDO 

AT&T  and  WorldCom  are 
gearing  up  to  introduce  priori¬ 
tization  support  for  IP-enabled 
data  services  that  offer  more 
predictable  traffic  delivery  over 
private  WANs. 

The  carriers  are  deploying 
software  that  supports  Differen¬ 
tiated  Services  (Diff-Serv)  on 
switches  throughout  their  data 
networks.  This  updated  soft¬ 
ware  will  let  AT&T  IP  Enabled 
Frame  and  WorldCom  Private  IP 
customers  establish  classes  of 
service  over  their  VPNs  that  do 
not  traverse  the  Internet. 

Diff-Serv  is  an  Internet  Engi¬ 
neering  Task  Force-proposed 
standard  that  defines  how  to 
establish  various  service  levels 
over  a  network  (see  related 
story,  right.) 

Both  companies  are  using 
Cisco  MGX  8850  switches  to 
support  these  services.  Cisco 
recently  released  a  new  version 
of  its  Internetwork  Operating 
System  that  includes  Diff-Serv 
and  other  quality-of-service 
technologies. 

The  upgrade  will  let  users 
designate  real-time  traffic  such 
as  voice  as  first  class  so  that  it 
has  priority"  over  other  traffic,  as 
well  as  reserve  third-class  traffic 
for  standard  HTTP  Web  traffic. 
While  neither  provider  would 
detail  how  many  classes  of  traf¬ 
fic  they  would  offer,  it’s  likely 
users  will  have  two  or  three  pri¬ 


ority  levels  to  choose  from. 

The  IP  Enabled  Frame  and 
Private  IP  services  that  carri¬ 
ers  are  upgrading  already  offer 
frame  relay  users  an  IP-like 
mesh  network  architecture  by 
using  Multiprotocol  Label 
Switching  (MPLS)  for  traffic 
engineering.  These  services 
have  been  popular  with  users 
because  they  let  existing 
frame  relay  or  ATM  customers 
move  from  a  point-to-point 
network  architecture  to  a  fully 
meshed  architecture  without 
the  added  costs. 

Traditionally,  users  were 
required  to  buy  dedicated  links 
to  set  up  a  meshed  network,  but 
MPLS  lets  users  establish  con¬ 
nectionless  IP  networks  over 
the  same  frame  infrastructure. 

As  the  carriers  add  new  fea¬ 
tures,  more  users  are  likely  to 
jump  on  board.  In  fact,  an  IDC 
report  that  will  be  issued  over 
the  next  few  weeks  shows  that 
60%  of  400  WAN  managers  sur¬ 
veyed  say  they  plan  to  deploy 
IP-enabled  data  services  within 
the  next  year. 

AT&T  and  WorldCom  s  IP-en¬ 
abled  services  are  popular  with 
business  users  that  have  legacy 
networks  and  want  to  get  more 
capabilities  without  jumping  to 
public  IP  network  sendees,  says 
Steven  Harris,  an  IDC  analyst. 
“Offering  users  prioritization  is 
a  step  in  the  right  direction  for 
users,  but  I  don’t  expect  users 
to  demand  class-of-service  sup¬ 


port  until  they  start  deploying 
applications  like  voice  over  IP 
or  videoconferencing,”  he  says. 

While  Diff-Serv  will  let  users 
better  predict  how  specific 
applications  will  be  handled 
over  their  VPNs,  it  will  also  let 
users  ensure  any  type  of  busi¬ 
ness  traffic  will  always  takes 
precedence  over  e-mail  and 
Web  surfing. 

AT&T  may  be  more  inter¬ 
ested  in  rolling  Diff-Serv  sup¬ 
port  so  it  can  offer  multina¬ 
tional  users  a  global  service 
offering,  says  David  Rohde,  a 
senior  analyst  at  The  Yankee 
Group.  Concert  —  AT&T  and 
British  Telecom's  faltering,  inter¬ 
national  joint  venture  —  is 
offering  Diff-Serv  support  on  its 
IP  Select  service,  which  is  Con¬ 
cert’s  equivalent  to  AT&T’s  IP 
Enabled  Frame.  It  has  been 
rumored  that  AT&T  is  interest¬ 
ed  in  buying  BT’s  portion  of 
Concert,  which  is  why  it  would 
make  sense  for  the  company  to 
be  prepared  with  interoperable 
service  options,  he  says. 

WorldCom’s  Private  IP  ser¬ 
vice  is  available  in  40  countries. 

Prioritization  for  IP  Enabled 
Frame  is  not  a  new  idea  to 
AT&T.  Last  September  AT&T 
talked  about  setting  up  classes 
of  service  using  IP  Precedence, 
an  older  IETF  specification.  But 
the  company  has  had  a  change 
of  heart  and  is  now  committing 
to  Diff-Serv. 

AT&T  says  it  will  announce 


its  IP  Enabled  Frame  Diff-Serv 
prioritization  support  at  Net- 
World+Interop  2001  in  Atlanta 
next  month.  While  the  company 
would  not  offer  many  details,  it 
did  say  the  service  would  be 
available  in  mid-September  and 
that  it  does  not  have  plans  to 


charge  customers  extra  fees  to 
use  the  class-of-service  features. 

WorldCom  says  it  will 
announce  its  service  sometime 
in  September.  WorldCom’s  Pri¬ 
vate  IP  customers  will  pay  an 
unspecified  “premium”  for  its 
enhanced  serv  ice.  3 
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THE  SKINNY  ON  DIFF-SERV 


Differentiated  Services  is  a  prioritization  technology  devel¬ 
oped  within  the  Internet  Engineering  Task  Force. 

The  proposed  standard  lets  service  providers  and  users 
establish  classes  of  service  or  priority  levels  over  their  net¬ 
work.  Diff-Serv  uses  the  type-of-service  (TOS)  bit,  which  is  in  the 
header  of  every  IP  packet.  Each  packet  is  marked  with  its  appropri¬ 
ate  class-of-service  tag  based  on  the  Diff-Serv  parameters. 

This  lets  the  routers  and  switches  on  the  network  forward 
these  packets  based  on  the  classes  that  are  defined  by  the  carrier 
and  user. 

A  customer  using  Diff-Serv  will  be  able  to  decide  how  traffic  is 
sent  over  their  private  VPN.  For  instance,  a  customer  could  desig¬ 
nate  all  voice  and  videoconferencing  traffic  as  first  class,  all  Peo- 
pleSoft  and  FTP  traffic  as  second  class  and  all  e-mail  and  HTTP 
traffic  as  third  class. 

The  switches  on  the  carrier's  network  don't  look  at  the  traffic  as 
voice  packets  or  e-mail  packets,  but  instead  look  at  the  TOS  bit  to 
determine  which  path  traffic  should  be  forwarded  through.  This  is 
what  will  let  the  carriers  offer  end-to-end  traffic  prioritization. 

—  Denise  Pappalardo 
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Nokia  boosts  security  features  on  VPN  software 


Company’s  VPN  client  and  gateway  software  to  support  smart  cards,  certificate  authorities. 


BY  TIM  GREENE 

MOUNTAIN  MEW,  CALIF.  — 
Nokia  this  week  will  improve 
the  security  features  in  the 
software  that  controls  its  VPN 
gear,  making  it  less  likely  that 
unauthorized  users  will  break 
into  corporate  VPNs  protected 
by  the  company’s  equipment. 

Version  3-1  of  the  Nokia 
client  and  gateway  software 
supports  use  of  smart  cards, 
which  are  hardware  tokens  that 
provide  strong  authentication 
of  VPN  users.  Earlier  Nokia  secu¬ 


rity  called  only  for  user  name 
and  password.  The  smart  card 
authentication  requires  users  to 
have  the  card  and  to  know  its 
password.  The  new  VPN  soft¬ 
ware  release  supports  smart 
cards  made  by  Setec. 

In  addition,  Nokia  is  building 
into  these  devices  support  for 
ensuring  that  digital  certificates 
used  to  authorize  VPN  users  are 
legitimate.  The  software  will 
support  VeriSign’s  certificate 
authority  only,  but  Nokia  plans 
to  support  Entrust  and  Balti¬ 
more  Technologies  certificate 


authorities  later  this  fall. 

Version  3.1  runs  on  Nokia’s 
CC500,  CC2500,  CC5200  and 
CC5205  VPN  gateways,  the  line 
of  VPN  gear  Nokia  obtained 
through  its  purchase  of  Net¬ 
work  Alchemy. 

With  the  software  upgrade, 
Nokia’s  gateway  and  PC  client 
software  will  support  a  method 
for  making  sure  VPN  traffic  can 
get  through  firewalls  that  trans¬ 
late  private  IP  addresses  to  pub¬ 
lic  ones.  This  process,  called 
network  address  translation 
(NAT),  is  used  to  mask  private 


addresses  from  the  Internet  or 
because  a  corporation  lacks 
enough  public  IP  addresses  for 
all  its  Internet-connected  de¬ 
vices.  The  Nokia  software  previ¬ 
ously  did  not  support  NAT. 

Version  3- 1  also  adds  manage¬ 
ment  tools  that  gather  more 
data  about  VPN  activity,  such  as 
which  administrators  have 
made  configuration  changes. 
These  tools  also  tap  data  that 
can  be  used  to  warn  administra¬ 
tors  when  the  capacity  of  a  gate¬ 
way  is  nearing  its  limit  so  steps 
can  be  taken  to  add  another. 


Nokia's  gear  competes  with 
the  likes  of  Cisco,  NetScreen 
and  Alcatel. 

The  software  is  expected  to 
ship  Sept.  24  with  new  gear  and 
is  a  free  upgrade  to  those  with  a 
software  service  contract. 

Nokia:  www.nokia.com 
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Location,  location,  location 

Where  VPN  gear  and  firewalls  are  placed  can  affect  how  well  they  work  together  and  overall 
security.  Configuration  can  also  be  affected  by  network  address  translation  (NAT). 
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Harmony, 

continued  from  page  1 

Nortel  Contivity  VPN  client  on 
their  laptops  to  remotely  estab¬ 
lish  secure  tunnels  to  a  Nortel 
Contivity  VPN  switch.  When 
Bill  O’Brien,  associate  director 
of  systems  security  at  the  com¬ 
pany,  decided  to  add  personal 
firewalls  to  the  laptops  to  boost 
security,  he  tested  half  a  dozen. 
O'Brien  discovered  that  only 
one  of  these  products,  InfoEx- 
press’  CyberArmor,  would  reli¬ 
ably  let  Nortel’s  VPN  software 
establish  VPN  connections. 

“The  desktop  firewall  and 
the  VPN  have  to  work  together,” 
O’Brien  says.  “Hackers  are 
always  looking  for  the  weakest 
links.” 

In  general,  much  of  the  prob¬ 
lem  Nortel  and  other  users  have 
experienced  has  to  do  with  NAT 
or  related  port  address  transla¬ 
tion  technology,  both  of  which 
substitute  a  private  IP  address 
with  a  public  one  for  Internet 
traffic.  Often,  customers  give 
LAN  devices  private  IP  numbers 
because  they  can’t  get  enough 
public  IP  addresses  or  they  want 
to  mask  their  machines  from  the 
Internet.  When  a  NAT  firewall  or 
router  sends  outbound  traffic 
through  the  firewall,  the  firewall 
translates  that  private  address  to 
a  public  one.  It  translates  in 
reverse  for  incoming  traffic. 

Because  IPSec  VPN  devices 
create  new  IP  headers  for  tun¬ 
neled  traffic,  packet  authenti¬ 
cation  checks  can  fail,  and  tun¬ 
neled  traffic  can  get  dropped 
by  firewalls  performing  NAT. 
Individual  vendors  have  found 
ways  to  work  around  this  (see 
graphic),  but  there  is  no  single 


agreed-upon  method  for  doing 
it  among  vendors.  The  IETF 
proposal  could  become  this 
single  method. 

The  IETF  proposal  calls  for 
wrapping  up  the  IPSec  traffic 
within  a  User  Datagram  Proto¬ 
col  (UDP)  header  before  NAT 
occurs.  Integrity  checks  on 
these  UDP  wrapper  headers 
can  be  made  successfully 
despite  NAT. 

This  proposal  is  a  combina¬ 
tion  of  suggestions  written  by 
several  vendors,  including 
Microsoft  and  RedCreek. 

No  serious  objections  were 
voiced  about  the  draft  at  the 
IETF  meeting  this  month,  but  it 
has  not  been  elevated  to  the 
status  of  a  standard,  according 
to  Paul  Hoffman,  a  member  of 
the  IETF.  Members  of  the  IETF 
committee  handling  the  pro¬ 
posal  are  continuing  their 
online  discussion  of  it. 

While  VPN  use  is  increasing, 
interoperability  among  different 
vendors’  equipment  is  not  ubiq¬ 
uitous,  and  this  includes  how 
they  deal  with  NAT  problems. 
And  these  combined  firewall- 
VPN  products  are  becoming 
more  popular.  By  2004,  52%  of 
firewalls  will  include  VPN  sup¬ 
port,  according  to  market 
research  firm  IDC.  Last  year,  23% 
of  the  firewall  appliances  sold 
included  VPN  support,  IDC  says. 

In  the  meantime,  customers 
have  to  decide  the  best  course 
of  action  based  on  their  cur¬ 
rent  network  equipment. 

Ken  Venner,  CIO  at  chip- 
maker  Broadcom,  says  his  com¬ 
pany  uses  a  collection  of  VPN 
gear  made  by  Cisco,  Nortel  and 
Red  Creek  as  well  as  a  Check 
Point  Software  firewall.  But 


Broadcom  is  dropping  the  Nor¬ 
tel  VPN  because  it  doesn’t  han¬ 
dle  NAT  well  with  the  Check 
Point  firewall.  “If  there  were  an 
adopted  standard,  I  probably 
would  have  had  only  one  soft¬ 
ware  VPN  product  and  one  or 
two  hardware-based  VPN  prod¬ 
ucts, ’’Venner  says. 

As  you  might  expect,  ven¬ 
dors  that  have  worked  out 
their  own  answers  to  the  NAT 
problem  and  sell  integrated 
VPNs  and  firewalls  say  their 
gear  is  the  best  way  to  go. 
Check  Point  chairman  Gil 
Shwed  claims  that  buying  the 
VPN  and  firewall  separately  is 
too  costly  and  expensive. 

“You  need  to  manage  two 
policies,  two  sets  of  systems 
and  that’s  simply  too  expen¬ 
sive,  not  only  in  the  fact  that 
you  have  to  purchase  two 
boxes,  which  obviously  costs 
more  than  purchasing  one,  but 
also  in  managing  on  a  day-to- 
day  basis,”  Shwed  says. 

But  separating  the  VPN  and 
firewall  allows  for  more  flexible 
configurations.  Richard  Palmer, 
vice  president  of  VPN  and  secu¬ 
rity  at  Cisco,  cautions  there  is 
no  one-size-fits-all  answer.  But  in 


Cisco’s  experience,  larger  com¬ 
panies  buy  the  VPN  and  firewall 
separately  because  that  configu¬ 
ration  allows  building  larger 
networks. 

“Most  large  enterprise  cus¬ 
tomers  typically  do  not  use  a 
VPN/firewall  combination,” 
Palmer  says.  A  typical  configu¬ 
ration,  according  to  Cisco, 
involves  running  the  VPN  gate¬ 
way  and  firewall  in  parallel, 
with  the  corporate  router 
directing  IPSec  packets  to  the 
VPN  gateway  and  non-IPSec 
traffic  to  the  firewall. That  way, 
the  VPN  traffic  doesn’t  actually 
pass  through  the  firewall 
because  the  VPN  tunneling  is 
considered  to  provide  an 
appropriate  security  level. 

Despite  the  fact  VPN  vendors 
implement  the  IPSec  VPN  stan¬ 
dard  differently  and  that  fire¬ 
walls  handle  security  in  a  num¬ 
ber  of  ways,  combining  firewalls 
from  one  maker  with  VPN  gear 
from  another  is  still  possible. 

Some  vendors  and  service 
providers  take  on  the  integra¬ 
tion  work  themselves,  making 
it  easier  for  end  users  to  imple¬ 
ment  the  products.  Cisco,  for 
example,  doesn’t  offer  a  desk- 


Can  compromise  authentication 
header 


top  firewall  of  its  own,  “so  we 
do  a  lot  of  interoperability  test¬ 
ing  ourselves  with  personal 
firewall  systems  that  our  cus¬ 
tomers  ask  us  to  check  out,” 
Palmer  says. 

Internet  service  providers, 
including  WorldCom,  are  also 
documenting  how  to  success¬ 
fully  piece  together  firewalls 
and  VPNs.  “We  have  a  number 
of  standard  configurations  and 
have  our  engineers  certify  the 
configurations,”  says  Audrey 
Wells,  senior  manager  of  IP 
VPN  services  for  WorldCom. 
These  certified  configurations 
are  then  used  in  customer  net¬ 
works,  she  says. 

But  once  a  standard  is  in 
place  and  widely  adopted, 
users  won’t  have  to  worry 
about  NAT  anymore  says  Chris 
Welles,  a  development  man¬ 
ager  with  VPN  equipment 
maker  SafeNet.  “Ideally  you 
want  something  that  you  can 
just  put  in,  and  it  works  with¬ 
out  having  to  configure  any¬ 
thing, ’’Welles  says.  3 
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U4EA  to  launch  bandwidth  mgmt.  software 


Start-up's  FlowFusion  device  will  compete  with  racketeer  and  Sitara  Networks  products. 


U4EA's  FlowFusion  device  will  let  users  control 
packet  flow  between  local-  and  wide-area 
networks. 


BY  APRIL  JACOBS 

LONDON  —  Start-up  U4EA 
next  week  will  unwrap  its 
FlowFusion  bandwidth  man¬ 
agement  technology,  which 
the  company  says  will  not 
only  let  network  managers 
provision  application  band¬ 
width,  but  also  help  them 
predict  how  applications  will 
behave  with  network  policies 
they  put  in  place. 

FlowFusion,  a  turnkey  hard¬ 
ware/software  device,  is  de¬ 
signed  to  do  more  than  just 
allot  bandwidth  to  packets 
going  over  a  network.  Using 
the  tools  in  FlowFusion,  net¬ 
work  managers  can  model 
how,  for  example,  a  video¬ 
stream  will  perform  with  the 
bandwidth  provided  for  it. 
Voice  and  video  packets  are 
particularly  sensitive  to  loss 
and  delay,  and  FlowFusion’s 
predictive  capabilities  can  help 
network  managers  avoid  those 
situations  by  letting  them  repli¬ 
cate  and  analyze  traffic  prior  to 


implementing  network 
policies,  U4EA  says. 

Francis  Yiu,  president 
of  Novani,  a  collocation 
systems  integration 
company  in  San  Fran¬ 
cisco,  says  FlowFusion 
technology  could  help 
his  customers  save 
bandwidth.  “Compa¬ 
nies  that  have  perfor¬ 
mance  problems  tend 
to  throw  more  band¬ 
width  —  open  up  the  pipes  — 
to  solve  issues,”  Yiu  says.  “This 
product  can  help  them  identi¬ 
fy  at  a  more  granular  level 
what  is  happening,”  so  appli¬ 
cations  and  bandwidth  can  be 
managed  more  efficiently. 

Coluntb  Harrington,  CEO  of 
U4EA,  says  the  company’s 
software  is  based  on  technol¬ 
ogy  developed  with  partners 
including  CERN,  the  European 
Center  for  Nuclear  Research, 
which  needed  the  technology 
to  help  predict  and  control 
high-speed  networks. 

The  FlowFusion  device  sits 


between  a  customer’s  LAN- 
WAN  interconnect,  typically 
behind  a  switch  or  router.  The 
device  will  feature  dual  10/ 
100M  bit/sec  Ethernet  ports, 
and  users  will  be  able  to  con¬ 
figure  the  box  with  a  Java- 
based  graphical  user  interface. 
The  management  software 
also  includes  a  command  line 
interface  that  lets  it  be 
accessed  through  telnet,  or 
directly  through  a  console 
cable. 

U4EA  will  compete  with 
bandwidth  management  ven¬ 
dors  such  as  Packeteer  and 


Sitara  Networks.  A  ven¬ 
ture  capital-funded  start¬ 
up,  with  about  $10  mil¬ 
lion  in  recently  secured 
funding,  U4EA  has  invest¬ 
ments  from  IIU  Limited, 
the  investment  arm  of 
Dermot  Desmond,  AIM 
Trust,  and  Henderson 
Technology.  The  compa¬ 
ny  is  launching  in  the 
U.S.  with  an  office  in  Salt 
Lake  City. 

U4EA  isn’t  naming  any  big 
customers  yet. 

Co-founder  and  COO  Ian 
Parker  was  vice  president  of 
operations  at  BATM  Advanced 
Communications,  a  broadband 
data  and  telecommunications 
company,  prior  to  joining 
U4EA.  Peter  Thompson,  vice 
president  of  software  develop¬ 
ment  at  U4EA,  served  as  a 
senior  research  fellow  at  the 
Science  Research  Foundation 
in  Bristol,  England. 

Prices  for  FlowFusion  will 
start  at  $12,000. 

U4EA:  www.u4eagroup.com 


Novell  packages  opens  directory  access,  eases  administration 


BY  JOHN  FONTANA 

Novell  this  week  will  release 
an  updated  PeopleSoft  driver 
for  DirXML,  a  move  that  shows 
the  company’s  intention  to 
link  the  metadirectory  with  its 
new  employee  provisioning 
software. 

The  provisioning  software 
will  make  it  easier  for  IT  pro¬ 
fessionals  to  provide  new 
employees  with  equipment 
and  access  to  applications 
when  they  join  a  company 

Novell  also  plans  to  ship 
DirXML  1.1  next  month  with 
new  drivers  that  support  NT 
domains  and  delimited  text 
files.  Both  drivers,  which  con¬ 
nect  the  metadirectory  to 
other  systems,  will  be  added 
to  the  base  set  of  drivers  that 
ship  with  DirXML. 

A  metadirectory  is  designed 
to  “join”  together  user  data 
from  myriad  directories  that 
typically  populate  a  corporate 
network. 

Version  1 . 1  of  DirXML  also 


will  include  new  administra¬ 
tive  features  that  support  load 
balancing,  error  detection  and 
enhancements  to  the  rules 
engine. 

The  additions  to  DirXML 
are  designed  to  give  cus¬ 
tomers  a  wider  array  of  sys¬ 
tems  that  connect  to  the 
metadirectory,  which  is  built 
using  Novell’s  eDirectory,  and 
new  ways  to  manage  those 
connections. 

But  they  also  are  being 
used  to  link  key  technologies 
that  Novell  is  hoping  will 
help  restore  the  company’s 
vitality. 

“There  are  no  break¬ 
through  advances  with  the 
new  driver,  but  Novell  is 
using  it  to  nudge  into  the 
provisioning  market  and  to 
raise  the  volume  level  on 
DirXML,”  says  John  Enck,  a 
Gartner  analyst. 

Indeed,  Novell  executives 
say  the  PeopleSoft  driver, 
which  features  support  for  Ver¬ 
sion  8. 1  of  that  software,  is  a 


key  component  in  Novell’s 
Employee  Provisioning  Sys¬ 
tem,  which  allocates  access 
rights  to  users.  Novell  intro¬ 
duced  the  provisioning  soft¬ 
ware  last  week. 

The  key  is  that  PeopleSoft 
8.1  introduced  support  for 
XML,  and  Novell  intends  to 
use  XML,  to  let  all  sorts  of 
data  be  swapped  between 
DirXML  and  PeopleSoft.  The 
new  driver  will  provide  the 
connection  for  automatically 
creating  PeopleSoft  accounts 
and  passwords. 

Novell  is  working  on  dri¬ 
vers  for  other  popular  enter¬ 
prise  resource  planning  (ERP) 
applications,  but  officials 
would  not  say  which  ones. 
SAP,  Oracle  and  J.D.  Edwards 
all  develop  ERP  applications. 

Novell,  which  is  focusing  on 
XML  to  build  connectors,  is  try¬ 
ing  to  distinguish  itself  from 
vendors  such  as  Critical  Path, 
iPlanet,  Microsoft  and  Siemens 
that  mainly  rely  on  Light¬ 
weight  Directory  Access  Proto¬ 


col  for  their  metadirectory 
connectors. 

The  release  of  the  People- 
Soft  driver  will  be  followed 
by  DirXML  1.1  next  month. 
One  key  feature  is  the  ability 
to  deploy  drivers  on  plat¬ 
forms  separate  from  those 
that  run  the  DirXML  engine 
and  eDirectory. 

“The  real  jewel  of  this  fea¬ 
ture  is  that  it  extends  the 
cross-platform  support  of  the 
drivers  beyond  the  platforms 
that  eDirectory  supports,” 
says  Wendy  Steinle,  DirXML 
product  marketing  manager. 
The  drivers,  which  are  built 
using  Java  or  C++,  run  on  Net¬ 
Ware,  Windows  2000  and  NT, 
Sun  Solaris,  Linux  and  Tru64 
Unix. 

The  PeopleSoft  driver  is 
priced  at  $10  per  user  object. 
DirXML  1.1  costs  $29.  H 


See  related  story. 
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the  data 

developer 

program  for 

wireless 

application 

development 


Have  an  idea  for  a  killer  wireless  app?  The  AT&T  Wireless  Data  Developer 
Program  has  the  tools  and  technical  resources  you  need  to  define,  develop 
and  test  your  idea — plus  the  marketing  expertise  to  help  deploy  it. 
Whether  it's  for  wireless  phones,  laptops,  PDAs  or  other  hand-held 
devices,  you  will  be  able  to  develop  your  wireless  application  for  use  with 
AT&T  Wireless  Data  Service  across  the  country.  How  cool  is  that? 


YOUR  WORLD.  CLOSE  AT  HAND. 


AT&T  Wireless 


■ 


■ 

w 

I 


PHONES  BY  ERICSSON  ^ 


attwireless.com/dataservice 

Important  Information 


AT&T  Wireless  Data  Service  is  available  in  over  3,000  cities  across  the  United  States.  Detailed  local  coverage  maps  are  available  at  attwireless.com/dataservice.  AT&T  Wireless  Data  Service 
is  available  over  the  AT&T  wireless  data  network  and  in  markets  where  we  have  intercarrier  agreements.  Service  outside  the  AT&T  Wireless  area  is  provided  by  other  wireless  carriers.  Coverage  may  vary  due 
to  customer  equipment  and  other  factors.  Due  to  coverage  limitations,  information  may  not  be  accessible  at  all  times.  Certain  service  applications  may  require  purchase  of  an  associated  service,  additional  software  or 
network  connections.  Additional  terms  and  conditions  apply.  Admission  into  the  Data  Developer  Program  is  subject  to  approval.  ©2001  AT&T  Wireless.  All  rights  reserved. 


877-784-8700 


Put  an  end  to  lost  data  with  the 
MaxAttach™  NAS  4300  file  server 
from  Maxtor.  Only  the  MaxAttach 
4300  with  Persistent  Storage 
Manager  (PSM)  attaches  to  your 
network  via  Ethernet  and  auto¬ 
matically  takes  snapshots  of  your 
file  system  as  often  as  you  tell  it 
to.  Making  data  recovery  easier 
than  ever.  And  like  all  of  our  NAS 
4000  Series  products,  it  provides 
disk  storage  for  the  cost  of  tape. 
So  while  profanity  won't  bring 
your  data  back,  the  new 
MaxAttach  4300  will.  Compare 
the  MaxAttach  4000  Series  to 
other  storage  solutions  with  the 
MaxAttach  Storage  Calculator 
at  www.maxtor.com/ma320  or 
call  1-800-240-9201. 


I*  400GB  capacity 

•  PSM  snapshot  capability 
•  Gigabit  &  10/100  Ethernet 
•  $5,999  MSRP 


Briefs 


TamoSoft  introduced  last  week 
a  network  traffic  analyzer  for  Win¬ 
dows  NT  and  2000  server-based 
networks  that  lets  network  profes¬ 
sionals  isolate  security  flaws,  net¬ 
work  bottlenecks  and  other  net¬ 
work  problems.  CommView  3.0 
can  decode  more  than  20  proto¬ 
cols.  It  is  compatible  with  wireless 
Ethernet  adapters  and  has  new  fil¬ 
ters  that  let  customers  view  net¬ 
work  sessions,  IP  addresses, 
ports  and  individual  packets  of 
data.  CommView  can  generate 
reports  in  plain  text  or  HTML  for¬ 
mats,  and  can  export  packet  infor¬ 
mation  to  other  protocol  analyz¬ 
ers.  The  product  starts  at  $100  and 
is  available  now. 

TamoSoft:  www.tamos.com/ 
products/commview 

EMC  has  announced  that  it 
has  tripled  the  distance  data  can 
travel  over  Fibre  Channel  or 
Enterprise  Systems  Connection, 
letting  system  administrators 
bridge  storage-area  networks 
over  greater  distances.  The  com¬ 
pany's  Symmetrix  Remote  Data 
Facility  (SRDF)  will  now  support 
distances  of  more  than  125  miles 
between  servers  and  its  storage 
arrays.  SRDF  is  remote  mirroring 
and  disaster  recovery  software. 
SRDF  starts  at  $22,500. 

EMC:  www.emc.com 

Storage  vendor  Crossroads 
Systems  recently  improved  its 
Fibre  Channel  to  SCSI  router.  The 
Crossroads  8000  Storage  Router 
now  has  two  Fibre  Channel  and 
eight  SCSI  Ultra/160  ports  for 
connection  to  SCSI-based  hosts 
and  Fibre  Channel  storage 
arrays.  It  also  contains  dual 
power  supplies  and  fans,  as  well 
as  a  10/100  M  bit/sec  Ethernet 
port  and  a  serial  port  for  remote 
management.  The  Crossroads 
8000  costs  $19,000  and  is  avail¬ 
able  now. 

Crossroads:  www.crossroads. 
com 


Infrastructure 

_  TCP/IP,  LAN/WAN  Switches,  Routers,  Hubs,  Access  Devices, 

Clients,  Servers,  Operating  Systems,  VPIVs,  Networked  Storage 


TAKING  TIME  WITH  JACK  MESSMAN 

CEO  examines  state  of  Novell 


Newly  appointed  Novell  CEO  Jack 
Messman  last  week  fielded  a  variety 
of  questions,  posed  by  Novell  cus¬ 
tomers,  on  how  intends  to  turn  the 
company  around.  Network  World 
Senior  Editor  Deni  Connor  obtained 
and  read  the  customer  queries. 

What's  your  plan  for  turning  Novell  into  a 
growth  company  and  what  products  are  key 
to  doing  that? 

Obviously  the  focus  on  solutions  is  pri¬ 
mary  for  growth. This  focus  will  drag  a  lot 
of  Novell  products  along,  so  to  speak.The 
second  thing  is  Novell  has  not  been  a 
company  that  has  been  known  for  its 
focus  on  customer  needs.  We  invented 
cool  products  that  may  or  may  not  have 
had  a  market. With  the  solutions  focus,  we 
are  going  to  get  better  feedback  from  our 
clients  and  customers  as  to  what  the 
problems  are,  so  we  can  develop  prod¬ 
ucts  that  solve  those  problems.We  have  a 
task  force  in  the  company  on  formalizing 
that  focus.  We  also  need  to  do  a  better  job 
of  articulating  where  we  are  and  how  we 
are  different.  We  did  brand  advertising, 
but  now  we  need  to  connect  the  brand  to 
the  products. 

It  seems  the  future  of  Novell  hinges  on 
providing  consulting  and  services  to  enter¬ 
prise  customers.  What  are  you  doing  for 
those  small  and  midsize  customers  that 
need  the  same  business  solutions  but  can't 
afford  consulting  projects? 

This  is  all  about  choice,  and  it  is 
wrapped  up  in  our  channel.  Many  cus¬ 
tomers  want  to  deal  with  a  local  solu¬ 
tions  provider.  They  see  him  at  the  coun¬ 
try  club;  they  see  him  at  church.  Others, 
particularly  large,  complex  accounts 
require  direct  interaction  with  Novell. 


www. nwfusion.com 


CHATTING 
UP  NOVELL 

Read  the  latest  breaking  news 
stories  on  our  Novell  profile  page. 
Get  links  to  investor  info,  product 
listings  and  join  the  discussion  in 
our  Novell  forum. 


That’s  why  we  developed  our 
direct  salesforce.The  channel 
is  still  hugely  important  to 
Novell  because  we  can’t 
cover  the  entire  market  by 
ourselves.  We  need  to  provide 
them  with  what  they  need  to 
be  successful  as  a  partner.  We 
need  to  improve  our  relation¬ 
ships  with  them.  We  have  not 
done  a  good  job  of  that.  We 
have  had  conflicts  in  the  field  that  need 
to  be  resolved. 

We  do  have  a  NetWare  for  Small  Busi¬ 
ness  product  that  is  going  to  be  upgrad¬ 
ed  for  NetWare  6  when  it  comes  out  in 
September.  We  are  going  to  support  the 
channel  to  go  after  smaller  accounts. 

In  NetWare,  you  don't  see  per-seat 
licensing  until  you  get  to  really  large  instal¬ 
lations.  When  will  we  see  per-seat  licens¬ 
ing  for  smaller  and  midsize  businesses? 

NetWare  6  will  be  user-based  licens¬ 
ing.  It’s  not  so  much  what  the  pricing  is; 
it’s  what  the  total  cost  of  ownership  is. 
You  wouldn’t  buy  a  car  just  because  it 


BY  TIM  GREENE 

ALEXANDRIA,  VA.  —  At  Networld+ 
Interop  next  month,  Ecutel  will  announce 
a  deal  to  license  its  wireless-roaming  and 
security  software  to  a  Japanese  maker  of 
VPN  equipment  that  will  let  wireless  lap¬ 
top  users  roam  among  wired  and  wireless 
networks  without  losing  secure  sessions. 

Matsushita  Electric  Industrial,  the  par¬ 
ent  of  Panasonic,  plans  to  use  Ecutel’s  Via- 
tores  software  as  part  of  Matsuchita’s 
VPN  products,  for  now  only  available  in 
Asia.  Ecutel’s  products  are  available  in  the 
U.S. 

Viatores  addresses  seamless  802.11b 
roaming  issues  that  are  considered  impor¬ 
tant  by  the  Wireless  Ethernet  Compatibili¬ 
ty  Alliance  (WECA).  Those  issues  include 
the  ability  to  secure  wireless  sessions. 
WECA  includes  equipment  makers  Agere 
Systems,  Dell,  Enterasys  and  Nokia. 

Viatores  consists  of  software  installed 
on  mobile  Windows  98  or  2000  PCs  and  a 
Viatores  Server,  which  can  be  supported 
by  Windows  NT/2000  or  Linux.  Depend- 


was  low  priced  if  the  cost  of 
maintenance  and  running  it 
was  very  high.  Gartner  did  a 
study  concluding  that  we 
have  the  lowest  cost  of  own¬ 
ership  for  any  operating  sys¬ 
tem  vendor. 

What  is  Novell  doing  with 
customers  that  are  not  happy 
with  the  products  and  atten¬ 
tion  Novell  gives  them? 

We  have  some  competitors  that  have 
taken  products  that  are  less  than  world- 
class  and  integrated  them  tightly  into 
suites  of  products  and  have  been  able  to 
get  good  customer  acceptance. 

The  quality  of  our  products  is  good. 
Novell  has  been  guilty  in  the  past  of  tak¬ 
ing  these  products  in  a  big  box  and  drop¬ 
ping  them  at  the  feet  of  our  customers 
and  saying  ‘These  are  really  great  gee- 
whiz  products  but  have  fun  putting  them 
together.’We  have  to  take  these  products, 
make  them  part  of  a  suite  that  works 
effectively  together  and  is  part  of  a  solu- 
See  Novell,  page  20 


ing  on  the  network  configuration,  users 
might  also  need  a  Viatores  Gateway,  a  Via¬ 
tores  Relay  and  a  Viatores  Multiplexer. 

For  security,  the  Viatores  Server 
authenticates  users  of  the  PCs  with  the 
Viatores  Client  then  encrypts  and  man¬ 
ages  traffic  between  the  LAN  and  the  PCs 
to  establish  an  IP  Security  tunnel.  As  PCs 
move  from  a  wired  LAN  connection  to  a 
wireless  LAN  link,  the  server  detects  this. 
The  server  automatically  locates  the  wire¬ 
less  access  point  the  PC  is  using  and  the 
PC’s  new  IP  address,  and  keeps  traffic 
flowing.  This  transition  takes  millisec¬ 
onds  and  doesn’t  disrupt  client-server 
sessions,  says  John  Harrison,  CEO  and 
founder  of  Ecutel. 

“Ecutel’s  strong  point  is  they  are  inte¬ 
grating  their  own  security.  Others  are 
going  to  third  parties  for  security'  and  lay¬ 
ering  it  on  their  wireless  technology,’’  says 
Tim  Scannell,  an  analyst  with  Mobile 
Insights. 

For  instance,  Nortel  is  bundling  Certi- 
com  VPN  software  for  wireless  PDAs  with 
See  Ecutel,  page  20 


Ecutel  supports  wireless  roaming 
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Wired  Windows  .  Dave  Kearns 

Attitude  problems  abound  at  Microsoft 


“It  appears  that  Microsoft  has 
misconstrued  our  opinion,  partic- 
ularly  with  respect  to  what  would 
have  been  required  to  justify 
vacating  the  district  court’s  find¬ 
ings  of  fact  and  conclusions  of 
la  w. . .  ” 

—  U.S.  Court  of  Appeals  for  the  Dis¬ 
trict  of  Columbia 


Once  again,  Microsoft  has  man¬ 
aged  to  antagonize  a  federal 
court,  but  this  time  it’s  not  a  single 
judge  —  such  as  the  District  Court’s 
Judge  Thomas  Penfield  Jackson  —  but 
an  appeals  court  of  seven  judges! 

Last  December,  I  criticized  Micro¬ 
soft’s  handling  of  the  appeal  as  being 
both  too  broad  and  too  scathing  in  its 
castigation  of  Jackson  (www.nw 


fusion.com,  DocFinder:  5725).  The 
Court  of  Appeals,  in  general,  agreed 
with  me.  Its  ruling  was  that  Jackson’s 
findings  of  law  and  fact  —  the  objec¬ 
tive  part  of  a  trial  —  were  right  on,  but 
that  Iris  out-of-court  activities  could  be 
seen  as  affecting  the  penalty  phase  — 
the  subjective  part  of  the  trial. 

Its  also  interesting  that  Microsoft 
has  now  appealed  to  the  U.S.  Supreme 
Court  —  the  same  court  that  Bill 
Gates’  lawyers  said  could  benefit  from 
the  oral  arguments  at  the  Court  of 
Appeals  level.  When  I  read  that,  I  took 
it  to  mean  that  the  Supreme  Court  was¬ 
n’t  capable  of  understanding  the  issues 
on  their  own  (well,  that  certainly  fits  in 
with  the  “let’s  insult  the  intelligence  of 
all  the  judges”  tactic!).  But  evidently,  at 
least  according  to  the  appeals  court, 
it’s  Microsoft  that  doesn't  understand. 

The  language  of  the  appeals  court 


ruling  is  somewhat  sharp,  indicating  to 
me  that  the  judges  feel  Microsoft  is 
overstepping  the  bounds  of  good  taste 
and  jurisprudence.  Jackson  felt  that 
way,  and  Microsoft  used  it  as  the  basis 
of  this  appeal. 

To  recap:  Microsoft  managed  to  lie 
to  Jackson  while  attempting  to  hood¬ 
wink  him,  then  used  his  subsequent 
anger  as  a  cudgel  to  have  his  penalty 
overturned.  They  next  said  the 
Supreme  Court  was  too  dumb  to 
understand  the  technology  involved. 
They’ve  now  managed  to  anger  the 
Court  of  Appeals  with  their  stalling  tac¬ 
tics.  Evidently  years  of  Panglossian 
chanting  to  consumers  that  Windows 
was  “the  best  of  all  possible  operating 
systems”  has  let  the  Redmond  brain 
trust  to  the  false  realization  that  every¬ 
thing  is  a  marketing  problem,  solved  by 
jumping  up  and  down,  yelling  and 


screaming,  and  hiding  the  facts. 

Kearns,  a  former  network  admin¬ 
istrator,  is  a  freelance  writer  and 
consultant  in  Austin,  Texas.  He  can 
be  reached  at  wired@vquill.com. 


Tip 


of  The 


Week 


Microsoft  manages  to 
stay  on  top  in  networking  in] 
large  part  due  to  Novell's 
fiascoes  —  such  as  the 
problems  with  the  latest  Net¬ 
Ware  5  service  pack  (www.nwfusion. 
com,  DocFinder:  5726)  and  the  GroupWise 
Padlock  patch  (DocFinder:  5727). 


Novell, 

continued  from  page  19 
tion  to  a  business  problem. 

How  do  Novell  and  Cam¬ 
bridge  Technology  Partners 
expect  to  reach  network  man¬ 
agers  and  CxOs  who  have  no 
exposure  to  Novell  or  NetWare? 

Most  consulting  firms,  if 
not  all  of  them,  develop  solu¬ 
tions  by  customer  engage¬ 
ments.  We  solve  a  customer 
problem  with  a  solution.  Our 
employees  are  required  to  put 
that  engagement  and  how  we 
solved  the  problem  on  our 
knowledge  management  sys¬ 
tem.  Management  regularly 


reviews  that  to  see  if  it  is  a 
solution  that  should  be  more 
widely  available  or  that  other 
customers  have  a  need  for.  If 
so,  we  then  take  that  solution 
and  bring  it  back  to  headquar¬ 
ters  and  involve  the  people 
who  originally  worked  on  the 
solution.  They  develop  a 
methodology  that  can  be  pro¬ 
vided  to  other  customers.  If 
we  can  develop  a  tightly  inte¬ 
grated  suite  of  products  and 
services,  it  can  then  be  sold 
by  the  Novell  sales  force.  We 
are  going  to  train  the  Novell 
sales  force  to  be  more  solu- 
tions-oriented. 

Users  say  Novell  should  fight 


back  when  Microsoft  slams  its 
products.  Why  does  Novell  just 
sit  back  and  take  it? 

When  you  see  Microsoft’s 
marketing  muscle  and  the  bal¬ 
ance  sheet  —  $30  billion  plus 
in  cash  —  it’s  not  a  wise  busi¬ 
ness  strategy  to  take  on  the 
giant.  We  need  to  find  places 
where  that’s  not  the  issue. 
Microsoft  is  not  going  to  stop 
taking  shots  at  us,  but  those 
people  who  understand  our 
products  know  that  they  are 
very  good,  otherwise  we 
would  have  been  out  of  busi¬ 
ness  a  long  time  ago.  Many  of 
our  products  are  just  becoming 
relevant  to  what  is  happening 
in  the  marketplace.  3 


Ecutel, 

continued  from  page  19 

Nortel  Contivity  VPN  switches. 

Scannell  says  because  wire¬ 
less  data  is  inherently  suscepti¬ 
ble  to  interception,  it  is  essen¬ 
tial  to  authenticate  users  and 
encrypt  data.  Traditional  Inter¬ 
net  security  technology  such 
as  Secure  Sockets  Layer  is 
viewed  as  not  secure  enough 
for  critical  business  data.  “That 
just  doesn’t  fly  in  the  enter¬ 
prise,”  Scannell  says. 

Separate  software  called  Via- 
tores  Relay  can  be  placed  in  a 
company  or  in  a  wireless  Inter¬ 
net  cafe  to  seek  out  new 
devices  coming  into  its  range. 
This  device  makes  the  transi¬ 


tion  between  access  points 
smoother  and  faster  than  if  Via- 
tores  Clients  had  to  announce 
themselves. 

Viatores  Gateways  come  into 
play  when  a  PC  accesses  the 
Viatores  Server  a  firewall.  The 
PC  authenticates  to  the  gate¬ 
way,  which  in  turn  forwards 
traffic  through  the  firewall  to 
the  Viatores  Server. 

Viatores  Multiplexers  are 
placed  at  the  same  site  with 
Viatores  Servers  to  send  tun¬ 
neled  traffic  as  HTTP  so  it  can 
traverse  firewalls  protecting 
other  companies.  This  is  used 
when  laptop  users  visit  a  site 
owned  by  a  business  partner 
and  want  to  use  the  partner’s 
Internet  connection  to  set  up  a 


Viatores  VPN  link  to  reach 
their  home  network. 

Because  the  partner’s  fire¬ 
wall  will  not  challenge  HTTP 
traffic,  the  partner’s  IT  staff 
doesn’t  have  to  make  special 
accommodations  for  the  visi¬ 
tors. 

Viatores  equipment  is  avail¬ 
able  now.  A  server,  relay 
and  gateway  package  costs 
$10,000.  Extra  servers,  relays 
and  gateways  cost  $2,000  each. 
Clients  are  sold  in  blocks  that 
cost  $75  to  $110,  depending 
on  how  many  are  bought.  Har¬ 
rison  says  the  total  cost  comes 
to  about  $150  to  $200  per  PC, 
depending  on  the  size  of  the 
network. 

Ecutel:  www.ecutel.com 


NOVELL  LAUNCHES 
PROVISIONING  SOFTWARE 


Novell  last  week  launched  a  software  and  consulting  ser¬ 
vice  that  will  make  it  easier  for  IT  professionals  to  pro¬ 
vide  new  employees  with  equipment  and  access  to 
applications  when  they  join  a  company. 

The  Novell  Employee  Provisioning  package,  is  Nov¬ 
ell's  first  bundling  of  Novell  products  with  consulting 
and  implementation  services  known  as  a  Jumpstart. 

This  Jumpstart  package  "allows  new  hires  to  be  productive 
very  quickly,  quicker  than  most  administrative  processes  allow 
today  and  allow  administrative  costs  in  managing  people  to  be 
significantly  reduced,"  says  Jack  Messman,  Novell  CEO. 

The  Employee  Provisioning  Jumpstart  will  be  sold  by  Novell 
and  Cambridge  Technology  Partners  consultants  and  Novell's 
direct  sales  force  to  enterprise  users  who  have  the  PeopleSoft 
human  relations  database  product. 

The  Jumpstart  would  reside  on  server  with  eDirectory  and 
DirXML  installed  that  acts  as  a  hub  through  which  application 
data  passes. 

When  a  new  employee  enters  the  company,  his  or  her  infor¬ 
mation  is  entered  into  the  PeopleSoft  system.  From  there,  with 
eProvisioning,  information  on  the  employee  will  be  distributed 
to  other  parts  of  the  network  and  applications,  where  it  may  be 
used  to  get  a  user  a  cell  phone,  pager  or  PC,  or  give  them 
access  to  applications  they  may  need. 

Employee  Provisioning  uses  the  Lightweight  Directory 
Access  Protocol  (LDAP)  directories  of  applications  to  pull 
data  from  or  place  data  in  the  application,  and  uses  Employee 
Provisioning  uses  Novell's  eDirectory  technology,  its  metadi¬ 
rectory  DirXML,  the  PeopleSoft  application  and  custom  soft¬ 
ware  drivers  to  provide  the  links  among  a  customer's  applica¬ 
tions. 

The  Novell  Employee  Provisioning  Jumpstart  is  available 
now. 

—  Deni  Connor 
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In  choosing  your  VPN  access  solution,  consider  the 
company  that  makes  connectivity  its  business.  The 

NetVanta  VPN/  Internet  Security  series  comes  to  you  from 
ADTRAN — a  company  that  sells  more  network  termination 
equipment  across  more  service  technologies  than  any  other 
vendor.  A  company  with  more  than  250  established  products 
for  fast,  reliable  and  economical  enterprise  networking. 


NetVanta™  2100: 

Internet  Security  Appliance 

VPN  gateway  and  firewall 
functionality 

Secure  communication 
over  the  Internet 

Supports  up  to  10  IPSec 
VPN  tunnels 


Network  Address  Translation 
(NAT)  protects  IP  addresses 

Internal  router  supports 
multiple  users 

Data  security  using 
Data  Encryption  Standard 
(DES)or3DES 

User  authentication  using 
Internet  Key  Exchange  (IKE) 

Stateful  inspection  firewall 
protects  against  cyber  attacks 

Web-based  configuration 
and  management 

Prompt  notification  of 
irregular  network  activity 

Industry-leading  5-year  warranty 


4  Corporate  Site 
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NetVanta  is  a  logical  extension  of  ADTRAN’s  dynamic 
networking  series,  and  is  one  of  the  most  risk-free  decisions 
you  can  make  for  VPN.  It  carries  the  ADTRAN  reputation  for 
quality,  reliability  and  dependability.  A  reputation  evidenced 
by  leading  market  share  positions  year  after  year.  Whether 
you’re  a  small,  medium,  or  large  business,  NetVanta  delivers 
the  exact  VPN  functionality  you’re  seeking,  backed  by  a 
five-year  warranty  and  great  technical  support. 
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For  a  free  VPN  technology  primer,  visit 
www.adtran.com/vpntech 


877.894.4614  Technical  Questions 
877.280.8416  Where  to  Buy 


Experts  choose  ADTRAN1 
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Infrastructure  Special  Focus 


Ultrafast  wireless 
technology  set  to  lift  off 


BY  JOHN  COX 

Later  this  year,  the  Federal  Communications 
Commission  will  decide  whether  to  give  the 
green  light  to  so-called  ultra-wideband  trans¬ 
mission.  If  approved,  UWB  could  have  a  dra¬ 
matic  impact  on  short-range  wireless  commu¬ 
nications  for  the  enterprise. 

UWB  is  almost  two  decades  old,  but  is  used  mainly 
in  limited  radar  or  position-location  devices.  Only 
recently  has  UWB  been  applied  to  business  commu¬ 
nications.  It’s  a  different  type  of  transmis¬ 
sion  that  will  lead,  proponents  say,  to  low- 
power,  high-bandwidth  and  relatively 
simple  radios  for  local-  and  personal-area 
network  interface  cards  and  access  points. 

At  higher  power  levels  in  the  future,  UWB 
systems  could  span  several  miles  or  more. 

Wireless  technologies  such  as  802. lib 
and  short-range  Bluetooth  radios  eventually 
could  be  replaced  by  UWB  products  that 
would  have  a  throughput  capacity  1,000 
times  greater  than  802.1  lb  (1 1M  bit/sec). 

Those  numbers  mean  UWB  systems  have 
the  potential  to  support  many  more  users,  at 
much  higher  speeds  and  lower  costs,  than  current 
wireless  LAN  systems. 

There  is  a  range  of  UWB  vendors  —  not  to  mention 
academic  researchers,  the  military,  defense  contractors 
and  many  others  —  looking  to  unleash  UWB  products. 
Among  the  best-known  UWB  vendors  are  Aether  Wire 
and  Location,  Multi  Spectral  Solutions,  Pulse-Link, Time 
Domain  and  Xtreme  Spectrum.  Intel  has  a  laboratory 
focused  on  UWB  research. The  Ultra  Wideband  Working 
Group,  a  UWB  advocacy  organization,  lists  about  150 
organizational  members  from  around  the  world,  includ¬ 
ing  Compaq,  Daimler  Chrysler,  Intersil,  Lockheed  Mar¬ 
tin,  Motorola  and  the  U.S.Air  Force. 

“Ultra-wideband  is  in  its  infancy  in  terms  of  speed 
and  distance,”  says  Frank  Dzubeck,  president  of  Com¬ 
munications  Network  Architects,  a  Washington,  DC., 
consulting  company,  and  a  Network  World  columnist. 

‘  Fhe  initial  approval  from  the  FCC  might  be,  for  exam- 
plexor  100M  bit/sec  with  a  range  of  150  feet.  But 
there’s  no  reason  why  you  can’t  increase  speed  and  dis¬ 
tance.  It’s  a  matter  of  power  and  finer  and  finer  granu¬ 
larity  of  the  silicon  chips.” 

LWB  is  fundamentally  different  from  existing  radio 
frequency  technology.  For  radios  today,  picture  a  guy 
watering  his  lawn  with  a  garden  hose  and  moving  the 
hose  up  and  down  in  a  smooth  vertical  motion.You  can 
see  a  continuous  stream  of  water  in  an  undulating 
wave.  Nearly  all  radios,  cell  phones,  wireless  LANs  and 
so  on  are  like  that:  a  continuous  signal  that’s  overlaid 
with  information  by  using  one  of  several  modulation 
techniques. 

Now  picture  the  same  guy  watering  his  lawn  with  a 
swiveling  sprinkler  that  shoots  many,  fast,  short  pulses 
of  water. That’s  typically  what  UWB  is  like:  millions  of 
very  short,  very  fast,  precisely  timed  bursts  or  pulses  of 


HIGH-SPEED  WIRELESS 

Ultra-wideband  systems 
could  be  faster  and  less 
expensive  than  current 
wireless  L/kIM  systems. 


energy,  measured  in  nanoseconds  and  covering  a  very 
wide  area.  By  varying  the  pulse  timing  according  to  a 
complex  code,  a  pulse  can  represent  either  a  zero  or  a 
one:  the  basis  of  digital  communications.  UWB  energy 
pulses  operate  in  the  same  frequency  spectrum  as  elec¬ 
tronic  “noise”  emitted  by  Pentium  II  chips, TV  monitors, 
electric  razors,  automobile  ignitions  and  fans.This  is  a 
huge  swath  of  the  spectrum,  regulated  only  by  FCC 
rules  on  how  much  power  these  devices  can  use. 

Tins  difference  in  transmission  methods  has  several 
big  implications. 

For  one  thing,  because  UWB  pulses  don’t  actually 
use  a  traditional  radio  signal,  called  a  carrier,  UWB 
transmissions  don’t  take  up  any  of  the  radio  spec¬ 
trum.  Spectrum  is  limited,  and  demand  for  it  is  grow¬ 
ing  fast.That’s  one  reason  for  the  FCC  interest:  UWB 
would  allow  a  whole  new  class,  and  volume,  of  voice 
and  data  communications  that,  in  effect,  wouldn’t  take 
up  any  more  “space”  in  the  crowded  radio  spectrum. 

Second,  and  partly  as  a  result  of  the  fact  that  UWB 
doesn’t  use  a  traditional  radio  signal,  UWB  transmitters 
and  receivers  will  be  much  simpler  to  build,  run  and 
maintain  than  those  in  use  today,  says  Douglas  Cum¬ 
mings,  an  engineering  scientist  at  the  Applied  Research 
laboratories  at  the  University  of  Texas  at  Austin.  “For 
UWB,  you  don’t  need  complex  radio  frequency  con¬ 
verters  and  modulators  and  so  on,” he  says.“I  only  need 
a  digital  method  to  construct  the  pulses  and  modulate 
them.This  can  all  go  on  a  single  chip.  One  vendor 
already  does  this  on  a  chip  the  size  of  a  penny.” 

Third,  because  UWB  operates  in  the  electronic 
“noise”  area  of  the  spectrum,  it  requires  little  power. 
“These  systems  can  use  50  to  70  milliwatts  of  power,” 
says  Adrian  Jennings,  technologist  with  Time  Domain  in 
Huntsville, Ala.,  one  of  the  pioneer  vendors  in  UWB. 


“That  is  one  ten-thousandth  the  power  of  a  cell  phone.” 
The  low  power  limits  the  range,  but  there  are  features 
of  pulse  transmission  and  some  tuning  techniques  that 
can,  in  effect,  extend  or  maintain  the  range. 

In  addition,  low  power  and  the  characteristic  wide 
spread  of  the  pulses  means  the  pulses  don’t  use  up 
already  crowded  chunks  of  the  radio  spectrum,  today 
occupied  by  802.1  lb  wireless  LANs  and  Bluetooth 
devices. 

Despite  the  low  power,  UWB  also  has  greater 
capacity  —  higher  bandwidth  for  more  users  — 

compared  with  these  other  technologies. 
In  early  August, Time  Domain  began  test¬ 
ing  its  just-fabricated,  second-generation 
UWB  chipset  using  silicon  germanium 
technology  created  by  IBM. The  new 
chipset  can  reach  40M  bit/sec,  compared 
with  just  2.5M  bit/sec  for  the  first  chipset 
two  years  ago,  Jennings  says. Another 
start-up,  Fantasma  Networks,  which  Pulse- 
Link  acquired  in  May,  claims  to  have 
reached  60M  bit/sec. 

Finally,  UWB  promises  to  be  highly 
secure.  It’s  very  difficult  to  filter  a  pulse 
signal  out  of  the  flood  of  background  elec¬ 
tronic  noise,  and  vendors  such  as  Time  Domain  are 
encrypting  the  zeros  and  ones  being  transmitted  by 
the  pulses. 

But  legalizing  UWB,  so  vendors  could  start  building 
network  products  with  UWB  chips,  is  up  in  the  air. 
FCC’s  public  comments  on  UWB  have  been  generally 
favorable,  and  academics  and  a  wide  range  of  vendors, 
including  Intel,  are  pressing  for  approval.  But  there  is 
concern  that  UWB  transmissions,  especially  for  UWB 
devices  that  will  operate  below  about  2  GHz,  will 
interfere  with  other  broadcasts.These  include  the 
Global  Positioning  System  (GPS),  public  safety  nets,  air 
traffic,  marine  navigation  and  communications, AM  and 
FM  radio,  and  television  broadcasts,  to  name  just  a  few. 

The  University  of  Texas  ran  a  battery  of  tests  last 
December  looking  at  the  UWB’s  impact  on  GPS. 

The  data  were  handed  over  to  the  FCC  last  Febru¬ 
ary  with  several  other  independent  studies.  UWB 
can  have  an  effect,  but  whether  it  is  unacceptable 
depends  on  how  one  defines  it,  Cummings  says. 

The  tests  also  found  the  effects  vary  widely 
depending  on  how  the  UWB  transmitter  is  tuned, 
timed  and  powered. 

“There  are  substantial  disagreements  [among  the 
interested  parties],  especially  over  what  are  the  ade¬ 
quate  margins  for  protecting  these  bands  against 
interference,”  says  Julius  Knapp,  deputy  chief  of  the 
FCC’s  Office  of  Equipment  and  Technology.  “FCC 
Chairman  [Michael]  Powell  has  said  to  Congress 
that  we’ll  address  the  issue  before  the  end  of  this 
year.” 

Cummings  says  he  is  confident  approval  will  be 
forthcoming. “There’s  just  too  much  potential  in  this 
for  someone  to  say,‘No,  we  re  never  going  to  use 
this,  ”  he  says.  3 


Ultra-wideband:  New  way  for  wireless 

Traditional  radio  waves . . . 

Ultra-wideband  pulses . . . 

•  Travel  on  specific  frequencies. 

•  Span  a  wide  swath  of  spectrum  (no  crowding). 

•  Crowd  the  radio  spectrum. 

•  Need  little  power. 

•  Bounce  off  objects,  causing  signal 
fade. 

•  Capacity  to  transmit  more  than  a  thousand  times 
as  much  data  as  current  802.1 1  b  wireless  LANs. 
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Did  you  back  up  all  my  files? 

Translation:  I  think  I  just  deleted  all  my  files. 
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At  CDW,  we  understand 
what  it  can  be  like  in  IT. 


Computing  Solutions 
Built  for  Business 
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Data  drives 
your  business. 


drives  your  data. 

VERITAS.  The  software  that  fuels  storage. 
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VERITAS 


Register  today  for  VERITAS  VISION  2001 

at  veritasvision.com 


VISION 

2001 


I  want  to  receive/continue  to  receive  my  FREE 
subscription  to  Network  World.  No,  thank  you.  □ 


'Sigrn 
,  HereJ 


Signature  (required) 


Date 


TO  QUALIFY:  You  must  supply  your  company  name  and  address.  If  military,  please  specifiy 
branch/base.  If  government,  please  specify  division. 


Name 


Title 


Company 


Division/Mail  StopWilitary  Branch  or  Base 


Street  Address 


City 


State 


Zip 


Business  phone  ( _ ) _ 

FAX  ( _ ) _ _ 

E-mail  address _ 

We  would  like  to  send  you  periodic  information  via  e-mail  on  3rd  party  networking  products/services. 
□  Check  here  if  you  DO  NOT  wish  to  receive  this  information. 


If  there  is  a  parent  company,  please  provide  name: _ 

□  My  home  address  is  also  my  business  address. 

Optional  delivery  address:  Enter  your  home  address  below  if  your  company  will  not  accept  delivery  at  your  business  address: 


Street  Address 


City  State  Zip 

Publisher  reserves  the  right  to  serve  only  those  individuals  who  meet  publication  qualifications.  ALL  questions  must  be 
answered.  Incomplete  forms  will  not  be  processed.  Free  subscriptions  available  to  qualified  US  applicants.  International  rates 
available  upon  request. 
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What  is  the  principal  business  activity  at  your  location? 

(check  ONE  only) 


OLD  Manufacturing  (Non-Computer/ 
Communications/OEM) 

02.D  Finance/Banking 
03,  □  Insurance/Real  Estate/Legal 
04.  □  Health  Care  Services 
05.  □  Hospitality/Entertainment/ 
Recreation 


09.  □  Utilities/Process  Industries 
(Mining/Construction/ 
Petroleum  Refining/ 
Agriculture/Forestry) 

10. D  Govemment/Military 

11. DConsulting  (Independent)  * 

12.  □  Education 


^.□Manufacturing  (Computer/ 
Communications/OEM) 

17. D  Resellers/VARs/VADs/ 

Integrators/Distributors* 

(Computers/Communications) 

18. D  Other  (please  specify) 


06.  □  Media/TV/Cable/RaditVPrint  13.0  Carriers/Voice/Data/ISP 


07. □  Retail/Wholesale  14.DWeb  Hosting/HSP 

TVade/Business  Services  15.DASP/SSP/MSP 

08.  □  Transportation 


•Attn  Consultants,  Integrators, 
Distributors,  Resellers:  Please  com¬ 
plete  form  based  on  ALL  clients  and 
your  own  business  needs 


2. 

in 


P:  What  is  your  primary  job  function?  (check  one  only) 

S:  What  additional  job  functions  are  you  involved  in?  (check  all  that  apply) 

PS  PS 


□  1.  □  Network  Management 

□  2.  □  CIQ/CTQ/IS/IT/M1S/ 

Systems  Management 

□  3.  □  LAN  Management 


□  4.  □  Datacom/Telecom  Management 

□  5.  □  Intemet/Intranet/Web/ 

E-Commerce  Management 

□  6.  □  Engineering  Management 


□  7.  □  Corporate  Management 

(CEO,  COO,  CFO,  Pres.,  VP, 
Dir.,  Mgr.) 

□  8.  □  Consultant  (Independent) 

□  9.  □  Other  (please  specify) 


What  is  the  estimated  value  of  network  equipment  and  services  that  you  specify, 
recommend,  or  approve  the  purchase  Of?  (Please  print  the  appropriate  number  code  on 
the  line  next  to  each  product  category.  Please  complete  ALL  categories  A-0.) 


1.  $100  Million  or  more 

2.  $50  Million  to  $99.9  Million 

3.  $25  Million  to  $49.9  Million 

4.  $10  Million  to  $24.9  Million 

5.  $1  Million  to  $9.9  Million 

6.  $100,000  to  $999,999 

7.  $50,000  to  $99,999 

8.  Under  $50,000 

9.  None  of  the  above 


A  _ Large  Systems 

(Mainframes/Minis) 

B _ Desktops 

(Micros/Laptops/  Workstations) 

C _ Mobile 

(including  PDAs,  Wireless) 

D _ Servers 

E _ LANs 

F  _ WAN  Equipment 

G _ Carrier  Services 


H _ lnternet/Weh/E-commerce 

I  _ _ Intranet/Extranet 

J  _ Internetworking 

(including  Routers,  Switches) 

K _ Storage 

L  _ Remote  Access 

M _ Peripherals 

N _ Software 

O _ Service/Support  Services 


m 

1.  D10 


fj  bm  What  is  the  total  number  of  sites  for  which  you  have  purchase  influence? 

(cheek  ONE  only) 


1.  □  100+  2.  □  50  to  99  3.  □  20  to  49  4.  □  10  to  19  5.  □  2  to  9  6.  □  1  7.  □  None 


Please  indicate  the  Web/Security/LAN/Internetworking/Wireless/Mobile/WAN  Equipment/ 
Carrier  Services  that  you  are  currently  involved  in  purchasing  or  plan  to  purchase: 

(check  ALL  that  apply)  A.  Currently  involved  in  purchasing  B.  Plan  to  purchase 


WEB - 

A  B 

□  01.D  Web  Servers/Software 

□  02.  □  Web  Traffic  Management 

□  03.  □  Electronic  Commerce  Tools 


SECURITY - 

A  B 

□  10.  □  Firewalls 

□  11.  □  Anti-Virus  Software 

□  12.  □  Private  Key  Encryption  Tools 


□  04.  □  Web  Development  Tools 

□  05.  □  Web  Content  Management 

□  06.  □  Web  Collaboration/ 

Groupware 


A  B 

□  07.  □  Web  Acceleration/Caching/ 

Load  Balancing 

□  08.  □  Web  Hosting  Services 

□  09.  □  Other 


□  13.  □  DES  Encryption  Tools 

□  14.  □  Authentication  Tools 

□  15.  □  Intrusion  Detection 


□  16.  □  Certificate  Authorities 

□  17.  □  Biometrics 

□  18.  □  Other 


A  B 

A  B 

A 

□  19.  □  Fast  Ethernet 

□  26.  □  Storage  Backup 

□ 

□  20.  □  Gigabit  Ethernet 

(Optical,  Disk,  Tape,  RAID) 

□  21.  □  Layer  3-7  Switches 

□  27.  □  Network  Test/Diagnostic 

□ 

□  22.  □  ATM  Switches 

Tools 

□ 

□  23.  □  Routers 

□  28.  □  Uninterruptable  Power 

□ 

□  24.  □  Network  Attached  Storage 

Supplies  (UPS) 

□ 

(NAS) 

□  29.  □  Network  Interface  Cards 

□ 

□  25.  □  Storage  Area  Networks  (SANs) 

(NICs,  PCMCIA) 

□ 

B 


Stackable  Hubs 


WIRELESS/MOBILE  - 

A  B 

□  37.  □  Wireless  LANS 

□  38.  □  Wireless/Cell  Phones 


WAN  EQUIPMENT - 
A  B 


Internetworking 


A  B  A  B 

□  39.  □  Wireless  LAN  Extension  Tools  □  41.  □  PDAs 

□  40.  □  Mobile  Data  □  42.  □  Other  Remote/Wireless 

Equipment/Services 


□  43.  □  Frame  Relay  Equipment 

□  44.  □  Bandwidth  Managers 

□  45.  □  Bandwidth  Shaping/QOS 

Tools 

□  46.  □  VPN  Equipment 

□  47.  □  ATM  Switches 


CARRIER  SERVICES  _ 
A  B 


□  48.  □  Voice/Video  over  IP 

Gateways 

□  49.  □  Modems 

□  50.  □  Cable  Modems 

□  51.  □  xDSL  Products 

□  52.  □  Diagnostic/Test  Equipment 


□  53.  □  DSUs/CSUs 

□  54.  □  PBXs 

□  55.  □  Call  Center  Tools 

□  56.  □  Videoconferencing  Gear 

□  57.  □  ISDN  Equipment/Services 

□  58.  □  Other  WAN 

Equipment/Services 


□  59.  □  Internet  Access 

□  60.  □  Private  Lines 

□  61.  □  Frame  Relay  Services 

□  62.  □  ADSI/DSL 

□  63.  □  T-l/T-3  Services 


□  64.  □  ATM  Services 

□  65.  □  Managed  Services 

□  66.  □  VPN  Services 

□  67.  □  LAN-Extension  Services 

□  68.  □  OC-3/OC-12 


□  69.  □  Wavelength  Services 

□  70.  □  Dark  Fiber 

□  71.  □  Other  Carrier  Services 

A  B 

None  of  the  above  (1  -  71)  □  72.  □ 


Please  indicate  the  Systems/Peripherals/Software/Applications/Business  Services 
that  you  are  currently  involved  in  purchasing  or  plan  to  purchase:  (check  all  that  apply) 

A.  Currently  involved  in  purchasing  B.  Plan  to  purchase 


SYSTEMS/PERIPHERALS  - 

A  B 

□  01.  □  Laptops/Notebooks 

□  02.  □  Desktops 

□  03.  □  Intel-Based  Servers 

□  04.  □  Rise-Based  Servers 

□  05.  □  Print  Servers 

SOFTWARE/APPLICATIONS  _ 

A  B 

□  14.  □  Desktop/ServerOperating 

Systems 

□  15.  □  Network  Management 

□  16.D  Systems  Management 

□  17.  □  Directory  Services 

□  18.  □  E-Mail 

□  19.  □  Groupware 


□  06.  □  Fax  Servers 

□  07.  □  Remote  Access  Servers 

□  08.  □  Video  Servers 

□  09.  □  Mid-Range  Systems 

(including  workstations) 


□  10.  □  Mainframes 

□  11.  □  Printers 

□  12.  □  Enclosures/Racks/Fumiture 

□  13.  □  Other  Computers/ 

Peripherals 


□  20.  □  Database  Management 

Systems 

□  21.  □  Customer  Resource 

Management  (CRM) 

□  22.  □  Enterprise  Resource 

Planning  (ERP) 

□  23.  □  XML  Tools 

□  24.  □  Desktop  Videoconferencing 


BUSINESS  SERVICES - 

A  B 

□  32.  □  Application  Service 
Provider  Services 


□  25.  □  Middleware 

□  26.  □  Document  Management  Tools 

□  27.  □  Site  Metering  Tools 

□  28.  □  Software  Distribution  Tools 

□  29.  □  Data  Warehousing 

□  30.  □  Applications  Development 

Tools 

□  31.  □  Other  Software/Applications 


A  B  A  B 

□  33.  □  Systems  Integration/  □  35.  □  Other  Services 

Consulting  A  B 

□  34.  □  Education/Training  Services  None  of  the  above  (1  -  35)  □  36.  □ 


Please  indicate  the  platforms  that  are  currently  installed/planned:  (check  all  that  apply) 

A.  Currently  installed  B.  Planned  for  purchase 


NETWORK  PROTOCOLS - 

A  B 

□  01.  □  TCP/IP  v4 

□  02.  □  TCP/IP  v6 

UN/WAN  ENVIRONMENT - 

A  B 

□  08.  □  Gigabit  Ethernet 

□  09.  □  Switched  Ethernet 

□  10.  □  Fast  Ethernet 

□  11.0  Ethernet 

□  12.  □  ATM 

DESKTOP/SERVER  OPERATING  SYSTEMS 
A  B 

□  23.  □  Windows  2000 

□  24.  □  Windows  95/98 

□  25.  □  Windows  NT/Windows  2000 

□  26.  □  Novell  (NetWare  5.X,  4.X, 

3.X,  2.X) 

□  27.  □  LINUX 


□  03.  □  SNA/APPC/APPN/LU6.2 

□  04.  □  Novell  IPX/SPX 


□  05.  □  NETBIOS/NETBUEI 

□  06.  □  NFS 

□  07.  □  Other  Network  Protocols 


□  13.  □  Token  Ring/Token  Ring 

Switching 

□  14.  □  Layer  3-7  Switching 

□  15.  □  FDDI 

□  16.  □  Fibre  Channel 

□  17.  □  Wireless  LANs 


□  18.  □  DSL 

□  19.  □  ISDN 

□  20.  □  Frame  Relay 

□  21.  □  Private  Line  Tl,  T3,  OC-3, 

OC-12 

□  22.  □  Other  LAN/WAN 

Environment 


A  B 

□  28.  □  Intel  Based  UNIX 

□  29.  □  RISC  Based  UNIX 

(inch  SOLARIS) 

□  30.  □  IBM  MVS/VM/VSE/ESA 

□  31.  □  OS/400 

□  32.  □  Digital  VMS 

□  33.  □  Macintosh 


□  34.  □  Palm  OS 

□  35.  □  Windows  CE 

□  36.  □  Other  Network  Operating 

System 

A  B 

None  of  the  above  (1-  36)  □  37.  □ 


Continued  on  next  page... 


Continued  from  page  one... 


What  is  the  total  number  of  Servers/Clients  installed/planned  at  your  location/in  your 
entire  organization?  (check  one  box  in  each  column) 


L. 

SERVERS 

CLIENTS 

At  Location 

Entire  Org. 

At  Location 

Entire  Org. 

A 

B 

c 

0 

□ 

i. 

50,000+ 

□ 

□ 

1. 

50,000+ 

□ 

□ 

2. 

10,000  to  49,999 

□ 

□ 

2. 

10,000  to  49,999 

□ 

□ 

3. 

1,000  to  9,999 

□ 

□ 

3. 

1,000  to  9,999 

□ 

□ 

4. 

100  to  999 

□ 

□ 

4. 

100  to  999 

□ 

□ 

5. 

50  to  99 

□ 

□ 

5. 

50  to  99 

□ 

□ 

6. 

10  to  49 

□ 

□ 

6. 

10  to  49 

□ 

□ 

7. 

1  to  9 

□ 

□ 

7. 

1  to  9 

□ 

□ 

8. 

None 

□ 

□ 

8. 

None 

□ 

What  is  the  estimated  number  of  employees  in  your  entire  organization/at  your 
location?  (check  ONE  in  each  seciion) 


A.  Entire  organization: 

1.  □  Over  20,000  5.  □  1,000  -  2,499 

2.  □  10,000-  19,999  6.  □  500  -  999 

3.  □  5,000-9,999  7.  □  499  or  less 

4.  □  2,500-4,999 


B.  At  your  location: 

1.  □  Over  20,000 

2.  □  10,000-  19,999 

3.  □  5,000-9,999 

4.  □  2,500-4,999 

5.  □  1,000-2,499 


6.  □  500  -  999 

7.  □  250-499 

8.  □  100-249 

9.  □  99  or  less 


/  What  is  your  scope  and  involvement  in  purchasing  decisions  for  network  products 

U  j  and  services  for  your  enterprise? 

A.  Scope  (check  ONE  only) 

CORPORATE/ENTERPRISE. 

1.D  Entire  Enterprise/  3.  CD  Division/Multiple 

Multiple  Enterprises  Divisions 

B.  Involvement  (check  ALL  that  apply) 

LCD  Create  Network/IT  4. □  Evaluate 

Strategy  Products/Services 

2.0  Recommend/Specify  5. CD  Determine  the  Need 

Brand  6.CD  None 

3.0  Approve  Purchase 

2.D  Multinational  4. CD  Department 

Enterprise  5. CD  None 

Which  of  the  following  hardware  platforms  are  installed/planned  in  your  company? 

(check  ALL  lhal  apply) 


A  -  Servers 

1.  □  IBM  (Mainframes) 

2.  □  IBM  RS/6000 

3.  □  IBM  AS/400 

4.  □  Compaq/Digital/ 

Tandem 


5.  □  Unisys 

6.  □  H-P 

7.  □  Other 


B  -  Workstations/Desktops/Laptops 

1.  □  Sun  Microsystems  5.  □  Dell 

2.  □  H-P  6.  □  Gateway 

3.  □  Compaq/Digital  7.  □  Fujitsu 

4.  □  IBM  8.  □  Other 


What  is  the  estimated  gross  revenue  of  your  entire  company/institution? 

(check  ONE  only) 


1.  □  $20  Billion  or  More 

2.  D  $10  Billion  to  $19.9  Billion 

3.  □  $1  Billion  to  $9.9  Billion 

4.  □  $500  Million  to  $999.9  Million 


5.  □  $100  Million  to  $499.9  Million 

6.  □  $50  Million  to  $99.9  Million 

7.  □  $10  Million  to  $49.9  Million 

8.  □  $5  Million  to  $9.9  Million 


9.  □  $4.9  Million  or  Less 
10.0  None  of  the  above 


1.  FOLD  HERE  &  MAIL  TODAY' 


Sign  Up  and  Start  Immediately  Receiving  our 
FREE  Weekly  e-Newsletter  This  Week  on  NWFusion 
and  easily  stay  current  on  today’s  networking  challenges! 


Start  my  subscription 
immediately.  My  e-mail 


address  is: 


Your  colleagues  may  also  qualify  for  a  FREE  subscription! 

Please  list  below  names  and  job  functions  of  other  individuals  at  your  location  who  might  also  benefit  from  a  FREE  subscription  to 

NAME _  JOB  FUNCTION _  E-MAIL  ADDRESS _ 


NAME 


JOB  FUNCTION, 


NAME 


JOB  FUNCTION, 


NAME 


JOB  FUNCTION, 


E-MAIL  ADDRESS 


E-MAIL  ADDRESS 


E-MAIL  ADDRESS 


▼  2.  FOLD  HERE  &  MAIL  TODAY  T 


FORM  0002 
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Briefs 


WatchGuard  Technologies  last 
week  extended  its  Firebox  III  fam¬ 
ily  of  firewall  appliances  to  the 
small  office.  The  Firebox  700  sup¬ 
ports  250  simultaneous  authenti¬ 
cated  users  and  150  simultaneous 
connected  branch  or  mobile 
users'  VPNs.  It  includes  an  ICSA 
firewall,  IP  Security  VPN  technol¬ 
ogy  and  managementtools.  The 
product  costs  $2,500  and  includes 
a  one-year  subscription  to  Watch- 
Guard's  LiveSecurity  Service. 

WatchGuard:  www.watch 
guard.com 

Almost  half  of  U.S.  workers  rely 
on  a  cell  phone,  pager  or  PDA, 
according  to  a  recent  r  eport  from 
Cahners  In-Stat  Group.  The  num¬ 
ber  of  wireless  users  is  expected 
to  climb  from  47%  in  2001  to  60% 
by  2004.  The  report,  "All  business 
is  eBusiness:  Demand  for  mobile 
solutions  &  communications 
expenditures  in  the  small,  SOHO, 
middle  and  enterprise  markets," 
found  that  small  firms  lead  the 
way  in  wireless  adoption. 

Cahners:  www.instat.com 

Smith  Micro  has  announced  a 
desktop  firewall  product,  Check- 
IT  Firewall.  The  software  con¬ 
trols  access  to  the  PC's  commu¬ 
nications  ports  and  monitors 
port-scanning  activity.  Rules  can 
be  customized  for  specific  appli¬ 
cations,  trusted  IP  addresses, 
ports  or  protocols.  The  product 
costs  $40. 

Smith  Micro:  www.smithmicro. 
com 

Canon  has  shipped  a  new  per¬ 
sonal  desktop  copier.  The  PC940 
prints  13  pages  per  minute  and 
features  zoom  enlargement  and 
reduction  and  250-sheet  front¬ 
loading  paper  cassette.  It  is  rec¬ 
ommended  for  small  offices  that 
churn  out  2,000  copies  per 
month.  The  copier  costs  $500. 

Canon:  www.usa.canon.com 


Net.Worker 


Products,  services  and  strategies  for  tying 
teleworkers  to  the  enterprise 


Home-office  ergonomics  made  easy 


Provide  your  teleworkers  with  the  creature  comforts  they  need  to  stay  productive. 


BY  STEVE  JANSS 

I  ride  my  mountain  bike  through  the 
desert  several  times  a  week,  so  when 
my  wrist  began  to  ache  last  year,  I 
thought  it  was  my  riding.  But  it  wasn’t  get¬ 
ting  better,  even  when  I  stopped.  It  turned 
out  to  be  carpal  tunnel  syndrome. 

Fortunately,  I  recognized  the  symptoms 
before  suffering  permanent  damage.  A 
week  away  from  computers  gave  my  wrist 
a  chance  to  heal.  Since  then,  I’ve  learned  a 
few  things  about  ergonomics  that  have 
helped  to  keep  the  condition  at  bay. 

The  technical  term  is  “repetitive  stress 
injury,”  or  RSI.The  Occupational  Safety  and 
Health  Administration  monitors  all  disor¬ 
ders  that  result  from  repetitive  trauma, 
even  if  they  are  caused  by  moving  your 
mouse  back  and  forth  on  a  neoprene  pad. 

Corporate  ergonomics  is  more  than 
just  preventing  repetitive  stress  injuries. 
It’s  about  minimizing  costs  and  maxi¬ 
mizing  long-term  productivity  by  keep¬ 
ing  all  employees,  including  telework¬ 
ers,  free  from  the  devastating  effects  of 
poor  design. 

Many  corporations  have  nailed  the 
ergonomic  equation  for  their  corporate 
employees.But  the  setup  for  teleworkers  is 
another  story.  A  teleworker’s  office  could 
be  anything  from  a  laptop  on  the  kitchen 
counter  to  a  bedroom  crammed  full  of 
PCs.  Unless  you’ve  visited,  you  have  no 
way  of  knowing  whether  they’re  following 
the  company’s  ergonomic  policy.  Advising 
your  teleworkers  on  equipment  and  furni¬ 
ture  can  go  a  long  way  in  preventing 
injuries. 

Lessons  in  lighting 

Good  lighting  reduces  glare  and  squint¬ 
ing,  as  well  as  fatigue.  If  you  find  yourself 
leaning  different  ways  to  get  a  better 
angle,  your  lighting  probably  needs 
improvement. 

My  favorite  lighting  solution  is  a  halo¬ 
gen  touchier  lamp  and  a  reflective  ceiling. 
The  lamp  costs  $20  at  Home  Depot.  The 
ceiling  came  with  the  house.The  result  — 
good,  diffuse  lighting  with  no  glare  or  eye- 
strain.  It’s  also  a  lot  closer  to  natural  light 
than  fluorescent.  Granted,  it  uses  about 
five  times  as  much  electricity,  but  I’m  foot¬ 
ing  the  electric  bill  —  not  the  company. 

Furniture  facts 

Dina  Muenier,  a  consultant  with  the 
Industrial  Accident  Prevention  Association, 


TELEWORKING 
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An  ongoing  series  designed  to 
help  set  up  your  teleworkers 
for  their  small-office  or 
home-office  networks.  ^ 


reports  that  a  worker  suffering  from  RSI 
will  collect  an  average  of  seven  weeks  of 
worker’s  compensation.  Even  a  day’s  com¬ 
pensation  can  pay  for  a  good  office  chair. 

Since  everyone  is  built  differently,  no 
chair  meets  everyone’s  needs.  Instead  of 
trying  to  guess  their  physiology,  give  your 
teleworkers  a  set  of  guidelines,  a  budget 
and  directions  to  the  nearest  furniture 
store  to  find  a  chair  that  meets  their  needs. 
Expect  to  pay  between  $150  and  $250. 

Most  office  chairs  are  poorly  designed. 
They  lack  proper  lumbar  support,  com¬ 
fortable  armrests  and  the  controls  neces¬ 
sary  to  adjust  to  the  worker.  The  best 
chairs  include  height  adjustments  for  the 
chair  and  armrests,  seat  tilts,  back  angle 
adjustments  and  tension  adjustments  for 
the  overall  angle.  The  right  chair  is  com¬ 
fortable  from  the  moment  you  sit  down 
and  stays  that  way  after  several  hours  of 
pounding  the  keyboard. 

Desks  should  support  the  role  of  the 
teleworker.  If  the  teleworker  handles 
dozens  of  small  pieces  of  paper,  perhaps  a 
traditional  roll-top  with  some  cubbyholes 
will  work.  Otherwise,  stick  to  a  desk  with 
large  flat  surfaces.  You  can  always  add 
cubbyholes  later. 

Input/output  feedback 

Most  computer-related  RSIs  result  from 
manipulating  data.  However,  if  a  tele¬ 
worker  is  retyping  large  amounts  of  text, 
invest  in  a  scanner  with  decent  intelligent 
character  recognition  OCR),  such  as  Neura- 
script’s  Intelli-Forms.  Mitek  is  another  con¬ 
tender,  with  seven  distinct  ICR  products.  If 
your  needs  are  less  demanding,  try  EDT’s 
WinOCR  Pro  4.0,  for  $40. 

Numerous  keyboards  are  available  that 
place  your  hands  at  a  more  natural  angle 
than  the  traditional  layout.  Unfortunately, 
most  of  them,  such  as  Microsoft’s  Natural 
Keyboard,  force  you  to  rotate  your  wrists 
inward  unnaturally.  Others,  such  as  the  one 
from  Pace  Development,  have  a  full  six 
degrees  of  freedom,  providing  just  the 


right  adjustment  for  anyone.  However,  at 
$250,  it’s  pricey  —  but  it’s  still  cheaper 
than  losing  a  good  employee. 

Then  again,  why  type  when  you  can 
speak?  Dragon  Systems’  NaturallySpeaking 
Version  5  comes  in  a  variety  of  flavors  — 
tailored  for  everyone  from  the  home  user 
to  a  corporate  forms  processor.  Even 
though  it’s  targeted  toward  smaller  mar¬ 
kets,!  like  IBM’s  ViaVoice  Pro  slightly  more 
than  NaturallySpeaking,  in  part  because  it 
learns  from  its  own  mistakes  when  you 
correct  its  errors  on  the  spot. 

One  of  the  more  promising  technolo¬ 
gies  replaces  the  mouse  with  head-  or  eye- 
controlled  sensors.  NaturalPoint’s  TrackIR 
sits  atop  your  monitor  and  lets  you  move 
the  cursor  simply  by  moving  your  head.  It 
reflects  IR  off  a  reflective  dot  worn  on 
your  forehead,  so  don’t  forget  to  remove 
the  dot  before  visitors  arrive. 

It’s  a  neat  idea,  but  for  the  moment  I’ll 
pass  —  I’m  waiting  for  someone  to  pitch 
me  a  unit  that  uses  IR  to  track  my  eye 
movement,  which  are  a  lot  less  prone  to 
repetitive  stress  injuries  than  my  neck. 

Health  hints 

Educate  your  teleworkers  on  the  impor¬ 
tance  of  taking  periodic  breaks,  and  main¬ 
taining  good  exercise  and  nutritional 
habits  to  reduce  die  tissue  damage  associ¬ 
ated  with  a  repetitive  stress  injury.  Finally, 
open  feedback  channels  so  they’ll  have  a 
means  of  correcting  something  before  it 
becomes  a  major  medical  problem. 

Next  story:  Software  sundries. 

Janss  is  president  of  Jansys  Informa¬ 
tion  Systems,  a  consulting  firm  special¬ 
izing  in  IS  technologies  for  small  busi¬ 
nesses.  He  can  be  reached  at  bizcom@ 
jansys.com. 


www.nwfusion.com 


SPECIALIZED 

SHOPPING 

Read  Part  8  in  our  Teleworker  Top  10 
series  to  find  out  how  to  choose 
the  right  computer  peripheral  equipment 
Also  get  links  to  Parts  1  to  7. 
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Introducing  Sprint  E|Solutions.SM  Venture  onto  the 
Internet  with  your  best  foot  forward,  safe  from  online 
mayhem.  Under  the  protection  of  Sprint  Evolutions,  your 
E-commerce  applications  and  databases  can  remain  secure. 

Our  consultants  understand  that  security  requires  more 
than  just  technology,  and  that  every  business  has  specific 
needs.  By  integrating  the  latest  controls  like  token-based 
authentication  and  identification,  virus  protection,  and 
business  continuity  planning  into  a  sound  management 
process,  we  can  safeguard  you  from  hackers  and  disasters. 

We  offer  unsurpassed  advanced  firewall  protection  to 
ensure  the  integrity  of  your  network.  And  it's  backed  by 
industry-leading  100%  uptime  SLAs. 

Because  we  apply  the  best  industry  practices,  your 
E-business  security  can  meet  or  exceed  stringent 
government  standards,  such  as  those  mandated  by  HIPAA. 


In  addition,  our  remote,  off-site  backup  through  the  Sprint 
Managed  Security  Operations  Center  covers  you  24/7, 
across  all  time  zones  around  the  world,  365  days  a  year. 

With  security  this  comprehensive,  you  and  your  customers 
can  do  business  without  fear  of  losing  your  shirts. 

Wherever  you  are  in  your  E-business  process, 
we  can  provide  you  with  the  best  route  to  your  goal. 

IP  VPN 
Remote  Access 
Hosting 
CPE  Partners 
Security 

Managed  Services 
Collaboration  Tools 
Consulting 


See  the  difference  for  yourself:  1  877  495-3501  ext.  21  or  www.sprintesolutions.com/backbone21 


Sprint  Evolutions 


Copyright  ©  Sprint  2001.  All  rights  reserved.  Sprint,  the  diamond  logo,  and  Sprint  Evolutions  are  trademarks  of  Sprint  Communications  Company  L.P. 


Briefs 


Sprint  added  1 1  markets  to  its 
Sprint  Business  DSL  service 
area  last  week.  The  provider 
now  offers  the  service  in  40  mar¬ 
kets  and  plans  to  be  in  86  mar¬ 
kets  by  early  next  year.  The  lat¬ 
est  additions  include:  Atlanta; 
Buffalo,  N.Y.;  Detroit;  Nashville; 
New  Orleans;  Newport  News, 
Va.;  Norfolk,  Va.;  Portland,  Ore.; 
Richmond,  Va.;  St.  Louis;  and 
Salt  Lake  City.  Sprint's  Business 
DSL  plans  start  at  $119  per 
month  and  offer  asymmetric  DSL 
speeds  of  up  to  1.5M  bit/sec 
downstream  and  384K  bit/sec 
upstream. 

Sprint:  www.sprint.com 

Companies  running  e-busi¬ 
nesses  from  shared  hosting  plat¬ 
forms  now  can  benefit  from 
VeriSign's  third-party  authenti¬ 
cation  services,  which  verify 
that  a  business  owns  the  domain 
name  it's  using  and  that  the 
business  is  what  it  says  it  is. 

Last  week  VeriSign  unveiled  its 
Shared  Hosting  Security 
Service,  which  provides  the 
same  authentication  services  to 
shared  hosting  e-businesses  as 
those  available  to  e-businesses 
running  on  dedicated  platforms. 
The  service  will  be  marketed 
through  ISPs  and  Web  hosting 
companies  underthe  name 
Secure  Site  Services. 

Teledesic  announced  last 
week  that  it  is  close  to  selecting 
a  satellite  manufacturer  to  build 
its  Internet-in-the-Sky  Network. 
The  company  says  it  will  choose 
either  the  Italian  vendor  Alenia 
Spazio  or  Lockheed  Martin  Com¬ 
mercial  Space  Systems  as  its 
network  infrastructure  partner. 
Teledesic,  which  was  founded  in 
1999  by  Craig  McCaw  and  Bill 
Gates,  says  it  will  launch  high¬ 
speed  Internet  access  services 
in  2005. 

Teledesic:  www.teledesic 
.com 
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Game  site  gets  boost  from  Digital  Island 


Traffic  spikes  no  fun  for  GameStop.com 

How  the  company  deals  with  spikes  using  Digital  Island; 

©  A  customer  goes  to  GameStop.com  and  static  images  are  delivered 
from  the  nearest  Digital  Island  Footprint  server;  dynamic  content  is 
sent  from  GameStop.com  servers  hosted  at  Digital 
Island's  data  center  in  California. 


Internet  ^ 


GameStop.com 
server  at  Digital 
Island 


Digital  Island 
Footprint  server 


Internet 


©  The  customer  selects  a  computer  game 
or  DVD,  for  example,  and  inputs  credit 
card  and  other  personal  information.  The 
data  is  encrypted  using  Secure  Sockets 
Layer  and  sent  through  a  firewall  and  a 
load  balancer,  and  into  a  database  server 
at  Digital  Island's  data  center. 


©The  customer  information  is  sent 
using  XML  to  GameStop.com's 
back-end  legacy  system  in  Texas 
through  a  VPN  with  a  FIX  firewall 
on  both  ends.  This  happens  contin¬ 
uously,  allowing  GameStop.com 
to  provide  up-to-date  status 
information  on  orders. 


PIX  firewalls 


Internet 


GameStop.com 
back-end  server 


BY  JENNIFER  MEARS 

If  you’re  visiting  GameStop.com,  one 
of  the  largest  online  providers  of 
video  games,  consoles  and  acces¬ 
sories  in  the  world,  chances  are  that  time 
is  of  the  essence.  You  want  to  be  first  on 
your  block  to  get  the  latest  PlayStation 
title  or  Dreamcast  release. 

Network  downtime  will  not  do. 

That  was  at  the  top  of  CIO  Jeff  Donald¬ 
son’s  mind  when  GameStop.com  decided 
to  revamp  its  site  to  handle  a  growing  cus¬ 
tomer  base  and  began  looking  for  a  new 
Web  hoster  last  fall.  It  settled  on  Digital 
Island,  which  offered  the  managed  host¬ 
ing  services  it  needed,  as  well  as  a  content 
delivery  network  (CDN). 

“Our  initial  push  was  simply  to  look  for 
a  higher  level  of  support,  a  better  quality 
of  support  than  what  we  had  with  the 
Web  hosting  company  we  were  with,” 
Donaldson  says.  “But  when  we  did  the 
research  we  found  we  were  setting  our 
sights  too  low.  We  saw  that  there  was  a 
better  way  to  do  business  and  a  better 
way  to  support  our  Internet  business.” 

Donaldson  and  his  team  began  re¬ 
searching  CDNs,  which  deliver  content 
from  geographically  dispersed  servers 
that  sit  at  the  edge  of  a  network. 

GameStop.com,  a  wholly  owned  sub¬ 
sidiary  of  Barnes  &  Noble,  has  been 
around  since  mid- 1999  and  in  that  time 
it  has  seen  traffic  to  its  site  double,  Don¬ 
aldson  says.  GameStop.com  now  claims 
to  average  about  100,000  unique  visitors 
per  day,  but  when  a  new  gaming  prod¬ 
uct  is  released  that  number  triples  or 
quintuples. 


When  traffic  spiked,  “we  attacked  the 
problem  with  hardware,”  Donaldson  says. 
“Basically,  we  would  try  to  project  when 
we  would  have  spikes,  and  we  would  put 
additional  processors  in  place  or  an  addi¬ 
tional  Web  server  and  application  server 
in  place  to  handle  it.” 

But,  Donaldson  acknowledges,  some¬ 
times  connections  to  the  Web  site  got 
dropped.  He  says  having  to  throw  extra 


hardware  on  the  network  was  costly  and 
risky,  since  modifications  could  lead  to 
downtime. 

“We  wanted  to  be  in  an  environment 
where  that  would  not  occur,  and  at  the 
same  time  we  wanted  to  combat  the  spik¬ 
iness  of  our  traffic  in  a  different  way,”  he 
says.  “That  was  the  No.  1  objective  in 
deploying  on  a  content  delivery  network, 
See  Digital  Island,  page  28 


NextWave  charges  ahead  despite  FCC  appeal 


BY  DENISE  PAPPALARDO 

Despite  not  officially  holding  spectrum 
licenses,  NextWave  Telecom  is  building  a 
wireless  network  in  95  markets  and  has 
nailed  billions  in  new  financing. 

Last  week  the  embattled  wireless  ser¬ 
vice  provider  announced  that  UBS  War¬ 
burg  is  providing  a  $2.5  billion  debt  allow¬ 
ance  that  the  company  will  use  to  fund 
the  construction  of  its  third-generation 
(3G)  wireless  network.  UBS  Warburg  is 
also  NextWave’s  financial  adviser. 

Earlier  this  month  NextWave  also 
received  $300  million  from  wireless 


equipment  company  Qualcomm.  These 
new  commitments  are  part  of  NextWave’s 
$5  billion  reorganization  plan  filed  Aug.  6 
with  the  U.S.  Bankruptcy  Court  for  the 
Southern  District  of  New  York.  The  court 
is  expected  to  confirm  or  deny  Next¬ 
Wave’s  plan  by  the  end  of  October. 

The  plan  also  states  that  NextWave  will 
not  sell  its  services  directly  to  consumers 
or  business  users,  but  will  offer  wholesale 
wireless  data  services  to  other  carriers. 

“In  light  of  the  competitive  nature  of 
the  [wireless]  market  and  when  they  will 
enter,  it  may  be  more  feasible  to  offer 
wholesale  services  than  to  attack  the  tradi¬ 


tional  carriers  that  have  legacy  voice  cus¬ 
tomers,”  says  Eugene  Signorini,  analyst  at 
consulting  firm  The  Yankee  Group. 

The  Yankee  Group  predicts  there  will 
be  11.4  million  wireless  users  accessing 
e-mail,  calendar  and  other  data  applica¬ 
tions  via  handheld  devices  by  year-end. 
That  number  is  expected  to  jump  to  52.8 
million  users  by  the  end  of  2004. 

Companies  such  as  AOL  or  Micro¬ 
soft’s  MSN  might  be  interested  in  brand¬ 
ing  their  wireless  service  to  their  cus¬ 
tomers  without  having  to  deploy  or 
manage  a  network,  Signorini  says.  But  he 
See  NextWave,  page  28 
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Eye  on  the  carriers  .  Johna  Till  Johnson 

How  ‘the  matrix’  can  win  you  boffo  reviews 


In  my  last  column  I  discussed  the 
rationale  for  negotiating  your  tele¬ 
communications  contracts  using  the 
"matrix  RFP”  Forget  Keanu  Reeves:This 
matrix  is  a  document  inviting  service 
providers  to  bid  on  specific  services 
within  specific  geographical  regions.  I 
recommend  that  you  send  this  docu¬ 
ment  to  as  many  service  providers  as 
you  can  —  even  those  you’ve  never 
heard  of. 

Let’s  assume  you’ve  followed  that 
advice.  Now  you’re  inundated  with 
250-page  responses  from  carriers. 
What  happens  next? 

If  you’re  like  most  network  execu¬ 
tives,  one  of  your  goals  is  to  limit  the 
number  of  providers  you  deal  with. 
Maybe  you  even  dream  of  handing  off 
all  your  telecommunications  needs  to 
a  single  global  supercarrier  —  and 
negotiating  awesome,  bulk  discounts 


as  part  of  the  bargain. 

It’s  not  gonna  happen,  at  least  not  in 
this  universe.  Unless  your  company  is 
unusually  small  or  homogeneous, 
there's  no  provider  that  can  meet  all 
your  needs  in  all  your  locations. 

Instead,  you  should  use  the  matrix 
RFP  to  narrow  the  field  to  a  short  list  of 
five  to  seven  players  that  will  go  on  to 
the  next  round  of  negotiations.The  key 
criterion  to  making  this  cut  is  breadth: 
You’ll  favor  providers  that  can  fill  the 
greatest  number  of  squares  on  the 
matrix.  A  provider  that  can  only  offer 
local  voice,  for  example,  is  out,  in  favor 
of  a  provider  that  could  offer  local 
voice,  data  and  cellular,  or  local,  long¬ 
distance  and  international  services. 

The  easiest  way  to  visualize  this  is  to 
mark  up  a  blank  matrix  with  colors  (or 
icons)  indicating  which  providers 
offer  services  where.  Squares  that  con¬ 


tain  many  check  marks  (say,  Internet 
service  in  North  America)  are  highly 
competitive;  ones  with  few  to  no 
entries  (say,  data  services  in  Africa) 
mean  your  choices  are  limited. 

Now  you’re  ready  to  move  forward 
with  RoundTwo.  Go  back  to  the  five  to 
seven  providers  that  made  the  initial 
cut,  and  begin  dickering  with  them 
regarding  price  and  service  levels. 
Please  don’t  leave  service-level  agree¬ 
ment  (SLA)  negotiations  until  the  end 
of  the  process,  or  you’ll  lose  consider¬ 
able  negotiating  leverage.  A  favorite 
trick  of  my  clients  is  to  use  the  super¬ 
ior  SLAs  provided  by  high-priced  ven¬ 
dors  such  as  Equant  —  now  owned 
by  France  Telecom  —  against  other 
providers,  which  end  up  offering  sim¬ 
ilar  SLAs,  but  at  much  lower  cost. 

Through  aggressive  negotiations 
you’ll  seek  to  reduce  your  number  of 


providers  to  two  or  three  that  cover 
most  of  your  telecom  needs. 

You  may  have  noticed  that  this 
process  is  longer  and  more  complex 
than  the  usual  RFP  negotiations,  due  to 
the  extra  step  of  creating  the  matrix. 
Why  bother?  Quite  simply,  it’s  the  best 
tool  we’ve  discovered  for  simultane¬ 
ously  lowering  costs,  improving  ser¬ 
vice  quality,  and  reducing  the  number 
of  carriers.  One  client  of  mine  was  able 
to  reduce  overall  global  telecommuni¬ 
cations  costs  by  35%  using  this 
approach,  and  that  included  an  overall 
increase  in  bandwidth  consumption. 

And  that  ’s  no  science  fiction  fantasy. 

Johnson  is  senior  vice  president 
and  CTO  for  Greenwich  Technology 
Partners,  a  network  consulting  and 
engineering  firm.  She  can  be  reached 
at  johna@greenwichtech.com. 


NewWave's  ups  and  downs 

Through  financial  hardships  and  court 
to  get  its  hands  on  wireless  licenses  it 

July 

NextWave  is  one  of  the 
big  winners  in  an  FCC 
auction  of  C-Block 
Personal  Communications 
Service  (PCS)  licenses. 


battles,  NextWave  has  been  trying 
won  in  1996. 


$ 


# 


September 

Several  auction 
winners,  including 
NextWave,  fail  to 
pay  for  PCS  licenses. 


June 

NextWave  files 
for  bankruptcy 
and  the  FCC 
revokes  its 
C-Block  licenses. 


June 

sf  U.S.  Court  of  Appeals 
reverses  previous 
ruling  and  states  that 
NextWave  is  the 
rightful  owner  of  its 
63  C-Block  licenses. 


Aug  - 

NextWave 
lands  $5  billion 
financing  package. 


Aug - 

The  FCC 
appeals  to 
the  Supreme 
Court. 


- 


December 

The  FCC  begins  new  auction  of 
licenses  that  had  been  owned 
by  NextWave  and  others. 
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NextWave, 

continued  from  page  27 

believes  NextWave  will  have  an 
uphill  battle. 

“Any  wireless  service  pro¬ 
vider  would  rather  hold  its  own 
licenses  and  network  infrastruc¬ 
ture,”  he  says. 

And  because  NextWave  has¬ 
n’t  made  friends  with  some  of 
the  biggest  wireless  services 
providers  in  the  industry,  it  may 
have  a  difficult  time  reselling  its 
network  to  the  likes  of  AT&T, 
Verizon  orVoiceStream. 

The  animosity  stems  from 
the  fact  that  NextWave  is  try¬ 
ing  to  take  back  the  licenses 
that  it  won  in  1996  —  and  sub¬ 
sequently  lost  —  from  the  very 
providers  that  acquired  the 
disputed  licenses  just  this  year. 


Soon  after  NextWave  filed 
for  bankruptcy  in  1998  the 
Federal  Communications  Com¬ 
mission  repossessed  the  com¬ 
pany’s  licenses. 

The  FCC  resold  the  licenses 
to  companies  such  as  Verizon, 
Cingular  (BellSouth  and  SBC’s 
joint  venture),VoiceStream  and 
an  AT&T  affiliate  called  Alaska 
Native  in  an  auction  that 
closed  in  January.  The  licenses 
were  repossessed  and  resold 
because  NextWave  failed  to 
pay  for  them. 

After  a  multitude  of  court  bat¬ 
tles,  NextWave  saw  its  first  win 
this  June  when  the  appeals 
court  ruled  that  the  FCC  did  not 
act  in  accordance  with  bank¬ 
ruptcy  code.  The  upshot  was 
that  the  licenses  still  belong  to 
NextWave.  Or  do  they? 


NextWave  claims  the  FCC 
“explicitly  said  if  NextWave 
won  the  appeals  case  it  would 
return  the  licenses  and  would 
not  continue  litigation,”  says  Ray 
Berger,  senior  vice  president  of 
marketing  at  NextWave.  But  the 
FCC  is  taking  its  fight  to  the 
Supreme  Court,  which  could 
delay  any  decision  by  a  year. 

However,  NextWave  isn’t 
waiting.  It’s  building  out  its  net¬ 
work  with  lxRT  Code  Division 
Multiple  Access  2000  2.5G  gear 
that  will  support  mobile  wire¬ 
less  data  transmissions  at  144K 
bit/sec.  The  company  says  its 
network  will  primarily  offer 
data  services  when  completed 
early  next  year. 

NextWave’s  network  will 
cover  95  markets  in  30  states 
and  Washington,  D.C.  Id 


Digital  Island, 

continued  from  page  27 

because  . . .  that’s  going  to  take  a 
lot  of  the  load  off  the  back-end 
servers.” 

Donaldson  looked  at  several 
Web  hosters  and  CDN  service 
providers,  including  Akamai, 
Data  Return,  Internap,  Exodus, 
and  telecom  companies. 

GameStop.com  chose  Digital 
Island  because  of  its  expertise 
in  the  entertainment  industry 
(it  hosts  content  for  Sega,  Uni¬ 
versal  Music  Group,  Fox  and 
AOL)  and  its  partnerships  with 
companies  such  as  Microsoft 
and  Sun.  Another  reason  was 
Digital  Island  could  provide 
managed  hosting  services  and 
operated  its  own  CDN,  he  says. 

Donaldson  knew  that  as  the 
game  market  heated  up,  Game- 
Stop,  com  would  need  to  offer 
online  gaming  to  stay  competi¬ 
tive  and  a  CDN  would  be  the 
best  way  to  handle  that  chore. 

Since  GameStop.com  was  re¬ 
architecting  its  site,  the  transi¬ 
tion  from  one  Web  hoster  to 
another  went  smoothly,  he  says. 

GameStop.com  has  about  a 
dozen  servers  hosted  at  Digital 
Island’s  data  center  in  Califor¬ 
nia  and  has  its  static  content 
distributed  across  Digital  Is¬ 
land’s  Footprint  CDN.  Cus¬ 
tomers  get  the  static  content 
delivered  from  whatever  Foot¬ 
print  server  is  closest  to  them; 
dynamic  content  comes  from 
a  server  hosted  at  Digital  Is¬ 


land’s  data  center. 

A  customer  makes  a  selec¬ 
tion  from  a  variety  of  games  and 
accessories.  The  order,  along 
with  personal  information,  such 
as  credit  card  numbers  and 
e-mail  addresses,  are  encrypted 
using  Secure  Sockets  Layer  and 
sent  to  a  database  hosted  at  a 
Digital  Island  data  center. 

Throughout  the  day,  order 
information  is  sent  through  an 
encrypted  Internet  tunnel  to 
GameStop.com’s  back-end  sys¬ 
tems.  An  e-mail  confirmation  is 
sent  to  the  buyer  and  another  e- 
mail  is  sent  when  the  order  is 
shipped.  Also,  order  status  is 
sent  to  the  Web  site  and  dis¬ 
played  to  the  customer. 

Donaldson  won’t  be  specific 
about  cost  savings,  but  says 
they’re  “significant.”  Neither 
Donaldson  nor  Digital  Island 
will  comment  on  pricing,  but 
Digital  Island’s  CDN  pricing  is 
pay-per-use,  meaning  customers 
are  only  charged  for  the  band¬ 
width  that  is  used  rather  than  a 
flat  rate  per  month. 

What’s  more,  Donaldson  can 
sleep  at  night  during  product 
launches  —  Microsoft  is  launch¬ 
ing  XBox  and  Nintendo  is 
launching  Game  Cube  this  fall 
—  and  the  holiday  season, 
when  the  number  of  visitors  in 
a  day  could  top  750,000. 

“You  remember  the  excite¬ 
ment  last  Christmas  over  Play¬ 
Station  2?  Well,  you  can  multi¬ 
ply  that  by  three  this  Christ¬ 
mas,”  Donaldson  says.  Id 
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THE  BEST  WAY  TO  MANAGE 

A  SUPPLY  CHAIN  IS  TO 
KNOW  THE  DEMAND  CHAIN. 


A  supply  chain  is  built  around  demand.  And  because  demand  can  go  from  overwhelming  to 
underwhelming  in  minutes,  it  can  wreak  havoc.  That’s  why  the  mySAP™  Supply  Chain  Management  solution 
integrates  seamlessly  to  handle  the  hazards  of  supply  and  demand.  It  puts  customers  at  the  center  of  a  networked 
supply  chain,  helping  you  anticipate  market  changes  and  fill  orders  faster.  It  also  allows  for  high  visibility, 
so  vendors  and  suppliers  can  work  together  efficiently.  Which  makes  it  the  only  collaborative  SCM  solution 
that  can  turn  a  supply  chain  into  a  profit  center.  For  more  info,  call  800  872  1727  or  head  to  www.sap.com 


THE  BEST-RUN  E-BUSINESSES  BUN  SAP 


Rock-Solid 

Data  Security. 


AIT-2  WORM. 

FOR  RELIABLE,  SCALABLE 
DATA  PROTECTION. 


Write  once,  read  many  technology — WORM — is  indispensable  when 
your  business  requires  dependable  data  storage  with  overwrite 
protection.  Sony  delivers  a  high  level  of  data  integrity— and  more— 
with  the  singular  benefits  of  AIT-2  WORM. 

•  IT’S  AFFORDABLE.  AIT-2  WORM  offers  up  to  50GB  native  on  a 
single  8mm  cartridge,  resulting  in  more  capacity  in  less  space — with 
a  lower  cost  per  GB — than  MO  and  CD. 

•  IT’S  SCALABLE.  When  you  choose  an  AIT-2  WORM  drive,  you’re 
making  an  investment  that  can  grow  with  your  business. 

•  IT’S  MULTI-FUNCTIONAL.  The  AIT-2  WORM  drive  is  a  single  unit 
that  meets  both  your  standard  and  WORM  data  storage  needs. 

With  AIT-2  WORM,  you  enjoy  all  the  advantages  of  Sony’s  patented 
Advanced  Intelligent  Tape™  technology— including  the  extremely 
durable  Advanced  Metal  Evaporated  media  technology  and  Memory- 
In-Cassette,  a  built-in  flash  memory  chip  providing  high-speed  searching 
and  rapid  access  to  data. 

For  rock-solid  data  security,  put  your  confidence  in  AIT-2  WORM.  And 
experience  the  value  and  reliability  that  are  distinctly  Sony. 

To  learn  more  about  AIT-2  WORM — and  the  complete  family  of  AIT 
products — visit  our  Web  site  at  www.aittape.com 


AIT.  Intelligently  engineered. 
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Briefs 


Metrobility  Optical  Systems 
last  week  announced  the  release 
of  T-1/E-1  fiber  connectivity  mod¬ 
ules  designed  to  transport  T-1  or 
E-1  traffic  across  singlemode 
fiber  at  distances  up  to  62  miles. 

The  products  eliminate  the 
need  for  costly  repeaters  and 
reduce  cost  of  ownership, 
Metrobility  claims  The  products 
incorporate  remote  and  local 
testing  of  outgoing  signals  —  or 
loopback  testing,  built-in  bit  error 
rate  testing  and  intelligent  soft¬ 
ware  management. 

The  T-1/E-1  fiber  connectivity 
modules  are  available  for  Metro¬ 
bility 's  Radiance  and  Lancast 
product  lines.  The  products  will 
be  available  in  the  fourth  quarter 
with  prices  starting  at  $750. 

Metrobility:  www.metrobility. 
com 

Princeton  Optronics  last  week 
announced  it  has  closed  a  sec¬ 
ond  round  of  financing  in  the 
amount  of  $25  million. 

Co-led  by  Investor  Growth  Cap¬ 
ital  and  St.  Paul  Venture  Capital, 
this  round  also  includes  invest¬ 
ments  from  Technology  Venture 
Partners  and  first  round  investors 
Novak  Biddle  and  Intel  Capital. 

This  additional  capital  will 
fund  the  final  development  stage 
of  Princeton  Optronics'  Power- 
Sweep  2000,  a  tunable  laser,  and 
scale  operations  in  support  of  its 
12.5G-bit/sec  receiver  and  modu¬ 
lator  driver  product  lines. 

Princeton  Optronics:  www. 
princetonoptronics.com 

The  Resilient  Packet  Ring 
Alliance  last  week  announced 
three  additional  members. 

They  are  Alcatel;  NEC  and 
Huawei  Tech,  a  provider  of  tele¬ 
com  gear  in  China.  These  new 
members  increase  RPR's  mem¬ 
bership  to  16  optical  networking 
and  chip  companies. 

RPR:  www.rpralliance.org 


Service  provider  developments  at 
the  juncture  between  the  enterprise 
and  the  new  public  network 


RouteScience  adds  twist  to  'Net  routing 

Company  overrides  BGP path  selection  to  select  best  performing  ISP  routes  for  Internet  traffic. 


A  better  route 


How  RouteScience’s  PathControl  determines 
optimal  paths. 


©  PathControl  adds  a  small  .GIF 
file  to  Web  server  content. 


ISP1 


BGP  edge 
routers 


ISP  2 


PathControl 


Web  servers 


©  As  the  content  travels  through  the  multi-homed 
ISP  network,  the  .GIF  file  monitors  the  performance 
of  the  application  transaction. 

ISP  3 


BGP  edge  routers 


©  Based  on  the  performance  data  collected  by  the  .GIF  file,  PathControl  updates  BGP  edge  routers 
with  optimal  path  selection  policies. 


BY  JIM  DUFFY 

RouteScience,  a  2-year-old  com¬ 
pany  developing  policy-  and 
performance-based  routing  pro¬ 
ducts,  last  week  unveiled  its  first  offering. 

PathControl  is  a  device  that  monitors 
the  performance  of  client/server  trans¬ 
actions  across  several  ISP  networks  to 
calculate  the  best  performing  path 
through  that  multihomed  network. 
Once  PathControl  determines  the  opti¬ 
mal  path  based  on  performance,  it  over¬ 
rides  Border  Gateway  Protocol  (BGP) 
path  selection  in  edge  routers. 

PathControl  sits  at  the  edge  of  Tier  2/3 
ISP  and  Web  hosting  service  provider 
networks  or  at  the  WAN  edge  of  enter¬ 
prise  networks.  When  a  Web  server 
receives  a  request  for  content,  PathCon¬ 
trol  adds  a  .GIF  file  of  a  few  hundred 
bytes  to  the  content  to  monitor  the  per¬ 
formance  of  the  request/receive  transac¬ 
tion  through  the  Internet. 

Based  on  this  performance  data,  Path- 


Control  updates  BGP  edge  routers  with 
policies  on  where  to  route  specific  IP 
address  destination  prefixes  for  optimal 
performance.  PathControl  can  even 


determine  optimal  routes  among  Label 
Switched  Paths  engineered  through 
Multi  protocol  Label  Switching,  company 

See  RouteScience,  page  32 


Crossbeam  integrates  security,  data  center  protection 


Modular  platform  designed  to  replace  multiple  point  products. 


BY  TIM  GREENE 

TORONTO  —  Crossbeam  Systems  this 
week  is  introducing  a  system  designed  to 
protect  data  centers  by  integrating  a 
range  of  security  services  typically 
offered  by  multiple  products. 

The  X40  Network  Application  Con¬ 
centrator  is  a  single  chassis  that  can 
replace  an  assortment  of  security  gear 
used  to  protect  sites  exposed  to  the 
Internet.  These  other  devices  include 
load-balancing  switches,  the  firewall 
appliances  they  support  and  other  secu¬ 
rity  servers  that  scan  for  such  threats  as 
intrusion  attempts  and  denial-of-service 
attacks. 

By  combining  these  functions  in  a  sin¬ 
gle  chassis,  service  providers  can  reduce 
the  number  of  devices  needed  to  sup¬ 
port  security  services,  making  manage¬ 
ment  simpler,  Crossbeam  President  Steve 
Justus  says. 

In  addition  to  protecting  data  centers 
from  Internet  attacks,  the  X40  can  be 


used  to  support  security  services  such  as 
network-based  firewalls.  The  X40  can 
also  run  firewall  applications  five  times 
faster  than  firewall-specific  processors, 
Justus  claims. 

The  X40  is  a  14-slot  chassis  that  holds 
two,  one-port  Gigabit  Ethernet  I/O  cards 
and  two  control-plane  cards. The  remain¬ 
ing  10  slots  are  reserved  for  application 
processing  modules,  where,  for  instance, 
firewall  software  would  be  supported.  In 
its  first  release,  X40  supports  only  Check 
Point  Software  VPN- 1 /Firewall- 1,  but  it 
will  support  other  applications  from 
other  vendors  by  year-end.  These  will 
include  intrusion  detection,  distributed 
denial-of-service  attack  prevention  and 
content  filtering,  Justus  says. 

The  X40  is  based  on  Linux,  so  any 
Linux-based  application  can  be  loaded 
on  an  Application  Processing  Module. 
Crossbeam  plans  to  work  with  certain 
application  vendors,  such  as  Check 
Point,  so  the  application  is  more  tightly 
integrated  with  the  X40  platform. 


This  will  result  in  a  broader  range  of 
applications,  says  Jeff  Phillips,  an  analyst 
with  TeleChoice.  “They  don’t  have  to  try 
to  be  the  best  in  the  world  at  every¬ 
thing,”  he  says. 

The  entry  price  of  the  X40  is  $64,000. 
It  will  be  available  in  December. 

Crossbeam:  uYvw.crossbeam.com 


www.nwfusion.com 


MORE  VPN 

PARTNERSHIPS 


Read  abouthow  Check  Point  Software 
recently  announced  three 
partnerships  that  will  result  in 
firewall  and  VPN  protection  for  data 
centers  and  application  servers. 
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The  Edge 


Vendors  see  network  equipment  sales  plummet 

Across-the-board  Q2  slump  in  service  provider  gear  due  to  reduction  in  spending,  tough  capital  market. 


■  Sales  of  routers,  optical  trans¬ 
port  gear,  1/1/ AIM  switches,  LAI\I 
switches  for  l/Meb  hosting  anti 
packet  telephony  gateways  all 
declined  in  the  second  quarter. 

Cahners  In-Stat  and  Dell’Oro  Group 


Tough  quarter 

Reduced  spending  prompted  a  drop  in 
worldwide  02  sales  of  WAN  switches, 
packet  telephony  gateways. 


WAN  switches 

(in  billions) 


Packet  telephony 
gateways 


(In  millions) 


2001 

SOURCE:  CAHNERS  IN-STAT 


2  0  0  1 


BY  JIM  DUFFY 

The  second  quarter  saw 
sales  drop  across  the  board  for 
most  network  equipment  tai¬ 
lored  to  service  providers, 
according  to  two  market 
research  firms. 

Sales  of  routers,  optical 
transport  gear,  WAN  switches, 
LAN  switches  for  Web  hosting 
and  packet  telephony  gate¬ 
ways  all  declined  in  the  sec¬ 
ond  quarter  from  the  first 
quarter,  according  to  Cahners 
In-Stat  and  Dell’Oro  Group. 
The  research  firms  again  cited 
the  dramatic  reduction  in  ser¬ 
vice  provider  spending  as  the 
culprit.  Service  providers  are 
also  looking  to  squeeze  as 
much  out  of  their  existing 
systems  and  only  now  are 


RouteScience, 

continued  from  page  31 

officials  say. 

PathControl  does  not  deter¬ 
mine  least-cost  routing,  but 
lets  users  define  route  policies 
based  on  ISP  link  cost  and  per¬ 
formance. 

Not  unique 

The  RouteScience  proposi¬ 
tion  is  an  intriguing  one,  but 
not  unique,  analysts  say. 

“RouteScience  is  part  of  this 
evolution  beyond  the  net¬ 
work-based  service  level  man¬ 
agement  folks,”  says  Paul 
Bugala,  research  analyst  at 
IDC.  “There’s  a  group  of  peo¬ 
ple  including  netVmg  and 
Caimis  who  are  all  kind  of  try¬ 
ing  to  find  the  routing  paths 
less  traveled  by  either  manipu¬ 
lating  BGP  or  doing  their  own 
sort  of  simulation.  They’re  tak¬ 
ing  these  real  complex  routing 
algorithms  and  trying  to  apply 
those  to  the  public  network 
and  find  these  loopholes  in 
routing  paths  other  people 
aren’t  taking  to  circumvent 
multivendor  service-level 
agreements.” 

Indeed,  the  technology 
behind  PathControl  is  an  evo¬ 
lution  of  older  network  simu¬ 
lation  products  from  Wavetek 
Wandel  Goltermann  and  Make 
Systems,  which  is  now  a  divi¬ 
sion  of  Opnet  Technologies, 


deploying  equipment  they 
purchased  last  year,  the  firms 
say. 

The  total  router  market  in 
the  second  quarter  declined 
9%  from  the  first  quarter  of 
2001,  and  16%  from  the  sec¬ 
ond  quarter  of  2000,  to  $2.5 
billion,  according  to  Cahners. 
High-end  and  terabit  routers 
declined  13%  and  14%  respec¬ 
tively,  the  firm  stated. 


Bugala  says.  Network  testing 
vendors  are  also  venturing 
into  the  route-path  engineer¬ 
ing  and  optimization  waters, 
he  says. 

“It’s  another  sort  of  ironic 
twist  in  this  trend  toward 
what  were  once  wonkish, 
internally  developed  traffic 
engineering  products  making 
their  way  into  more  service¬ 
centric  contexts,”  Bugala  says. 

That  may  be  the  appropri¬ 
ate  context  in  which  to 
describe  PathControl.  The 
product  can  double  the  appli¬ 
cation  transaction  speed  for 
50%  to  80%  of  destinations, 
on  average,  and  up  to  10 
times  faster  for  “poorly 
served”  end  users,  Route- 
Science  claims.  PathControl 
can  also  provide  predictable, 
deterministic  Internet  perfor¬ 
mance  regardless  of  the 
amount  of  congestion  and 
delay  in  the  Internet  core,  the 
company  says. 

PathControl  performance 
measurement  instrumenta¬ 
tion  —  the  small  .GIF  file  —  is 
a  passive,  non-intrusive  agent 
that  avoids  pings  and  uses 
minimal  network  resources, 
RouteScience  says. The  device 
also  generates  hundreds  of 
thousands  of  updates  daily 
and  can  send  them  automati¬ 
cally  to  BGP  edge  routers. 

The  system  generates  real¬ 
time  prefix-by-prefix  ISP  per- 


Dell’Oro’s  figures  for  high- 
end  routers  —  those  capable 
of  OC-48  and  OC-192  speeds 
—  show  a  revenue  decline  of 
28%  between  the  first  and 
second  quarters.  Dell’Oro  said 
the  market  for  OC-48-capable 
devices  declined  by  more 
than  50%  from  the  first  quar¬ 
ter,  from  $505  million  to  $249 
million. 

Cisco  and  Juniper  Net- 


formance  and  route-optimiza¬ 
tion  reports  that  can  be  used 
to  evaluate  end-to-end  transac¬ 
tion  performance  and  negoti¬ 
ate  SLAs.  PathControl  is  in 
field  trials  and  is  expected  to 
ship  in  October.  Pricing 
ranges  from  $140,000  to 
$250,000,  depending  on  the 
device  configuration. 

Entry-level  pricing  includes 
a  modular,  1 4-slot  chassis  that 
occupies  eight  rack  units  and 
support  for  two  ISP  links. 
Optional  modules  can  be 
added  to  support  additional 
ISP  links  and  enhanced 
reporting  features. 

Former  Cisco  executives 
Herb  Madan,Jim  McGuire  and 
Joel  Evanier  founded  Route- 
Science  in  December  1999. 
These  executives  also  found¬ 
ed  performance  management 
vendor  Netsys  Technologies  in 
1991.  Cisco  acquired  Netsys 
in  1996. 

RouteScience  has  85  emp¬ 
loyees,  and  is  headquartered 
in  San  Mateo,  Calif.,  with  oper¬ 
ations  in  Boston. 

RouteScience:  www.route 
science.com 


works,  the  distant 
leaders  in  this  mar¬ 
ket,  swapped  share 
evenly:  Cisco’s  share 
declined  to  70%  from 
80%  in  the  first  quar¬ 
ter,  while  Juniper 
gained  10%,  from 
19%  in  the  first  quar¬ 
ter  to  29%  in  the  sec¬ 
ond  quarter. 

The  market  for 
OC-192-capable  In¬ 
ternet  core  routers 
actually  grew  16%, 
from  $247.1  million 
in  the  first  quarter  to 
$286  million  in  the 
second  quarter,  acc¬ 
ording  to  Dell’Oro. 

Cisco  nearly  quadru¬ 
pled  its  revenue  in  this  market 
during  this  time  and  tripled  its 
market  share.  Juniper  lost 
ground,  as  its  revenue  de¬ 
clined  40%  and  its  market 
share  dropped  from  77%  in 
the  first  quarter  to  40%  in  the 
second  quarter. 

Avici  Systems,  the  third 
leading  vendor  in  OC-192 
routers,  saw  its  market  share 
increase  25%  between  the 
first  and  second  quarters,  from 
6%  to  7.5%. 

Multiservice  WAN  switch 
revenue  was  $1  billion,  a 
decrease  of  28%  from  the  first 
quarter  of  2001,  Cahners 
reported.  In  this  market,  ser¬ 
vice  providers  economized  on 
capital  spending  by  using 
existing  equipment  as  much  as 
possible  and  adding  more, 
higher-density  cards  to  this 
equipment  to  handle  traffic 
growth,  Cahners  said. 

Optical  insight 

In  the  optical  market,  sales 
of  dense  wavelength  division 
multiplexing  (DWDM)  and 
SONET/SDH  gear  declined  16% 
from  the  first  to  second  quar¬ 
ters,  according  to  Dell’Oro. 
Lucent  assumed  market  leader¬ 
ship  from  Nortel,  which  saw  its 
sales  decline  by  more  than 
50%. 

Nortel  also  lost  its  market 
leadership  in  long-haul  DWDM 
with  a  64%  decline  in  revenue, 
and  in  SONET/SDH  equip¬ 
ment,  with  a  50%  drop  in  sales, 
Dell’Oro  said.  Nortel  main¬ 
tained  its  leadership  in  metro¬ 


politan  DWDM  even  though 
revenue  declined  16%. 

The  Layer  2/3/4  to  7  switch 
market  shrank  9%  as  ports 
shipped  dropped  to  3 15  3  mil¬ 
lion  from  34.83  million  in  the 
first  quarter,  according  to  Cah¬ 
ners.  Revenues  shrank  15%  to 
$3.62  billion. 

Gigabit  Ethernet,  Layer  3 
and  modular  switches  drove 
ports  and  revenue,  Cahners 
reported. 

Layer  4  to  7  Gigabit  Ether¬ 
net  switches  outperformed 
the  overall  market  for  the 
quarter,  Cahners  stated.  Mod¬ 
erate  switch  growth  is  expect¬ 
ed  to  resume  in  the  second 
half  of  2001,  where  Fast  Ether¬ 
net  and  Layer  3  products  will 
drive  unit  shipments,  and 
Layer  3/4  to  7  and  Gigabit  Eth¬ 
ernet  will  drive  revenue 
growth,  the  research  firm 
predicts. 

Packet  telephony  gateway 
revenue  totaled  $243. 2  mil¬ 
lion  in  the  second  quarter,  rep¬ 
resenting  a  10%  decline  vs.  the 
previous  quarter,  Cahners  re¬ 
ported.  Third-quarter  port 
shipment  growth  is  expected 
to  be  flat  compared  with  the 
second  quarter. 

Packet  telephony  gateways 
are  faring  much  better  than 
some  other  segments  in  this 
tough  environment,  Cahners 
stated.  As  a  means  to  reduce 
cost  and  expand  services, 
sales  of  packet  telephony 
gateways  are  expected  to 
flourish  when  the  industry 
slump  abates.  \jk 
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60  GIGABIT  PORTS,  10-GIGABIT  UPLINKS, 
WIRE-SPEED  METRO  ROUTER  WITH  MPLS. 

ALL  IN  5  RACK  UNITS. 


Introducing  the  RS  16000  from  Riverstone  Networks! 
It’s  the  new  generation  of  router  built  expressly  for 
Gigabit  and  10-Gigabit  Metropolitan  Area  Networks. 
The  chassis-based  RS  16000  delivers  up  to  60  wire- 
speed  Gigabit  ports,  along  with  10-Gigabit  Ethernet 
and  CWDM  uplinks  all  in  5  rack  units  -  that’s  70%  more 
Gigabit  ports  per  rack  inch  than  the  nearest  competitor. 
For  service  providers,  this  means  more  revenue  per 
rack  and  lower  operating  costs. 

But  the  RS  1 6000  is  more  than  the  highest  density  router 
in  the  industry.  As  a  full-function,  Internet-caliber  metro- 
optimized  router,  it  also  delivers  rich  service  creation 
capabilities.  Through  hardware-based  MPLS,  bandwidth 
carving,  and  extensive  billing  and  accounting,  the  RS  16000 
converts  raw  bandwidth  into  profitable  services  for  carriers 
throughout  the  Metropolitan  Area  Network. 

Contact  Riverstone  Networks  at  1-877-778-9595  or  visit 
riverstonenet.com/nww  to  see  how  we’re  changing  the 
rules  in  the  Metro. 


Come  Visit  us  at  N+l  2001  in  Atlanta  Booth  #6062 


Optixia 


in  analysis  platforms 
since  Freud's  couch. 


Highest  port  density  in  the  industry:  480  ports  of  10/100  Ethernet, 
240  ports  of  Gig  Ethernet  •  Full  support  for  Ixia's  existing  product 
line  of  10/100Mbps  Ethernet,  1  Gbps  and  10  Gbps  Ethernet,  0C-3e / 
1 2c/48c/ 1 92c  POS,  0C-48c/192c  BERT,  and  USB  •  Redundant  power 
supplies  •  Hot  swappable  interfaces  •  RISC  CPU  per  port  running 
Linux  and  TCP/IP  stack  for  sophisticated  routing  protocol  testing  (BGP-4, 


MPLS,  OSPF,  RSVP-TE,  IS- IS)  and  server  load  balancer  stressing 
•  Chassis-clustering  to  create  thousands  of  synchronized  ports  •  low- 
cost,  full-line  rate  interfaces  for  manufacturing  tests  *  Automated,  Tel 
based  test  suites  for  router  performance  analysis,  server  load  balancer 
verification  and  cable  modem  testing  •  Multiple,  concurrent  user  sup¬ 
port  to  reduce  cost  of  ownership 


In  Motion 


1  -877— FOR-IXIA  www.ixiacom.com  International  +1-818-871-1800 


Enterprise 


Briefs 


IBM  and  customer  relationship 
management  vendor  Siebel  Sys¬ 
tems  have  made  Siebel's  line  of 
eBusiness  software  available  for 
IBM's  eServer  iSeries.  The  Siebel 
eBusiness  Application  software 
line  was  made  available  on  OS/ 
400  Version  4  Release  5  last  week. 
A  release  of  the  Siebel  software 
on  the  OS/400  Version  5  Release  1 
is  to  be  launched  within  the  next 
two  months.  The  Siebel  software 
will  be  made  available  across  the 
IBM  eServer  product  line  in  the 
future,  the  companies  say. 

IBM:  www.ibm.com;  Siebel: 
www.siebel.com 

Intesource,  a  provider  of  Web- 
based  procurement  services  to 
grocery  and  healthcare  buyers, 
and  Cleartrack  Information  Net¬ 
work  recently  partnered  to  deliver 
online  procurement  and  distribu¬ 
tion  services  for  the  entire  supply 
chain,  from  supplier  negotiations 
to  dock  delivery  and  post-delivery 
analysis.  Services  will  be  deliv¬ 
ered  through  a  hosted  application. 
Cleartrack  makes  the  Hawk  Next 
Generation  Visibility  software  that 
monitors  shipments  and  sends 
immediate  notifications  about  a 
shipment's  status. 

Intesource:  www.intesource. 
com;  Cleartrack:  www.cleartrack. 
com 

Central  Command  last  week 
released  the  AntiVirus  eXpert 
Professional  6,  an  antivirus 
defense  and  Internet  application 
firewall.  The  company  claims 
AntiVirus  eXpert  6  can  detect 
and  remove  more  than  52,000 
known  viruses.  It  could  also  stop 
unauthorized  applications  from 
accessing  the  Internet  and 
includes  a  real-time  content 
virus  scanner  to  intercept  virus¬ 
es  and  other  malicious  applica¬ 
tions  as  computer  files  are 
accessed.  Pricing  begins  at  $50. 

Central  Command:  www. 
centralcommand.com 


Cisco  beefs  up  VoIP  management 


BY  PHIL  HOCHMUTH 

Cisco’s  new  and  enhanced  man¬ 
agement  packages  should  help 
users  more  effectively  monitor 
the  status  of  key  voice-over-IP  gear  and  run 
Web  hosting  servers. 

Announced  last  week,  CiscoWorks 
VoIP  Health  Monitor  software  product 
brings  status  monitoring  and  alerts  of  IP 
voice  gear  —  Cisco  CallManager  servers, 
voice-over-IP  gateways  and  Catalyst 
switch  port  modules  —  in  addition  to 
other  Cisco  products  into  a  single  man¬ 
agement  interface. 

Previous  Cisco  voice-over-IP  manage¬ 
ment  software  was  limited  to  a  Web 
interface  used  to  access  individual  Call- 


BY  KATHLEEN  OHLSON 

CUPERTINO,  CALIF.  —  Looking  to  help 
customers  fill  security  gaps  in  their  net¬ 
works,  Symantec  next  week  is  expected  to 
unveil  upgrades  for  its  Norton  Internet 
Security  and  System  Works  software  suite. 
The  company  has  also  bulked  up  its  Nor¬ 
ton  AntiVirus  software. 

The  need  for  stronger  antivirus  and 
security  software  is  increasing  as  recent 
attacks  such  as  the  Anna  Kournikova 
and  Code  Red  viruses  are  spreading 
faster  than  earlier  attacks  such  as  Mel¬ 
issa.  The  enhanced  software  will  also 
help  keep  Symantec  in  step  with  chief 
security  rivals  Network  Associates  and 
Trend  Micro. 

For  its  flagship  package,  Norton  Anti- 
Virus  2002  offers  e-mail  scanning,  script 
blocking,  automatic  virus  deletion,  intelli¬ 
gent  alerts  and  a  new  interface.  The  soft¬ 
ware  scans  e-mail  —  as  it  arrives  in  an  in¬ 
box  and  as  it  leaves  —  to  check  for  viruses 
contained  in  attachments. 

Attachments  have  contained  some  of 
the  most  widespread  viruses  and  worms, 
including  LoveLetter  and  Melissa.  These 
worms  often  spread  using  Microsoft 
Visual  Basic  Script  files.  In  addition  to 
scanning  e-mails,  Norton  AntiVirus  2002 
offers  a  script-blocking  feature  to  filter 
out  such  potentially  troublesome  attach¬ 
ments  and  can  even  stop  e-mails  that 
may  contain  infected  attachments  from 
being  sent,  Symantec  said. 


Manager  servers  to  check 
status  or  view  system  alerts 
and  statistics. 

The  software  can  also 
monitor  and  provide  reports 
on  175  other  Cisco  router 
and  switch  products,  giving 
users  a  total  view  of  voice 
and  data  in  an  IP  network, 
the  company  says.  The  soft¬ 
ware  runs  on  the  Windows 
2000  server  platform. 

Cisco  also  rolled  out  the 
1105  Hosting  Solution  Eng¬ 
ine,  a  management  appliance 
aimed  at  networks  with  Web  servers 
attached  to  server  load  balancers  and  fire¬ 
walls. The  device  allows  for  better  manage- 


The  software  also  automatically  up¬ 
dates  virus  definitions  and  links  to  Syman¬ 
tec’s  online  virus  encyclopedia. 

David  DeBacker  of  Erie  Team  PA  Career- 
Link  says  automating  any  aspect  of  secur¬ 
ity  will  save  his  staff  time  and  lets  them 
tackle  more  complex  problems. 

“The  benefit  for  me  is  my  time  and  my 
staffs  time  . . .  the  less  time  we  spend  rac¬ 
ing  around  the  easier  it  is  [for  us],”  says 
DeBacker,  a  regional  MIS  director  at  the 
Erie,  Pa.,  career  services  company.  Erie 
CareerLink  will  load  AntiVirus  2002  on  25 
laptops  later  this  year. 

Symantec  also  bolstered  its  System- 

See  Symantec,  page  36 

Symantec  bulks  up  security  wares 

The  following  features  will  appear  in 

upcoming  releases  of  these  security 

products: 

Norton  AntiVirus  2002 

•  Inbound  and  outbound  e-mail  scanning. 

Internet  Security  2002 

•  Parental  and  privacy  control. 

•  Home  Network  Wizard,  which  detects  systems 
on  a  user’s  home  network. 

•  Auto  LiveUpdate  keeps  virus  detections  current. 

Norton  SystemWorks  2002 

•  One  Button  Checkup  lets  users  schedule 
automatic  system  checks. 


ment  of  Web  gear  and  moni¬ 
toring  of  Web  traffic,  Cisco 
officials  say. 

Also  announced  were  two 
voice-related  additions  to  the 
CiscoWorks  QoS  Policy  Man¬ 
ager  and  Service  Manage¬ 
ment  Solution  software  prod¬ 
ucts.  For  the  Policy  Manager, 
a  voice  over  IP-based  “tem¬ 
plate”  —  a  bundle  of  precon¬ 
figured  quality-of-service  set¬ 
tings  —  is  now  available  to 
let  customers  add  the  cor¬ 
rect  QoS  settings  for  voice 
on  an  IP  network. 

Voice  features,  added  to  the  Service 
Management  product,  which  tests  and 
measures  data  network  performance, 
will  let  customers  set  thresholds  and 
alerts  based  on  the  bandwidth  require¬ 
ments  for  voice. 

Users  say  the  QoS  templates  for  the 
QoS  Policy  Manager  should  help  new 
customers  of  Cisco’s  Architecture  for 
Voice  Video  and  Integrated  Data  IP  voice 
equipment,  says  Patrick  Olson,  CIO  of 
Menlo  College  in  Atherton,  Calif.  Olson 
has  been  running  Cisco  CallManager 
servers  and  600  IP  phones  for  the  past 
year.  Olson  also  uses  CiscoWorks  QoS 
Policy  Manager  and  has  beta-tested  voice 
QoS  templates. 

“For  some  installs,  it  will  be  a  useful 
product  for  helping  people  set  up  QoS 
properly,  which  can  be  difficult,”  Olson 
says,  adding  that  he’s  figured  out  the 
right  QoS  settings  for  voice  on  his 
network. 

Cisco’s  1105  Hosting  Solution  Engine 
is  an  IOS-based,  one  rack-unit-high  (1.75 
inches)  appliance  that  can  sit  between  a 
network  of  Web  servers  and  load-balanc¬ 
ing  devices  and  let  customers  bring 
servers  up  and  take  them  offline  without 
having  to  manually  reconfigure  load-bal¬ 
ancing  equipment.  According  to  Cisco, 
the  idea  for  the  product  came  partly 
from  its  own  IT  department,  where  the 
team  that  managed  Web  server  farms 
needed  a  way  to  easily  take  load-bal¬ 
anced  servers  offline  and  online. 

The  product  can  also  be  used  to  ga¬ 
ther  statistics  on  Layer  4  through  7  traf¬ 
fic  in  a  network,  giving  users  infor¬ 
mation  on  the  kind  of  traffic  flows 
hitting  their  Web  servers  and  the  per¬ 
formance  of  load-balancing  switches. 
The  appliance  can  be  accessed  through 
a  PC  where  a  graphical  interface  is  used 
See  Cisco,  page  36 


Symantec  improves  security  wares 


Growing  Voice 

Research  firm  IDC 
says  that  revenue 
for  software  that 
manages  voice- 
over-IP  networks 
will  grow  to  almost 
$754  million  by  2004 
as  the  technology 
starts  to  take  off. 
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Enterprise  Applications 


'l\let  Insider .  Scott  Bradner 

Billing  for  voice  over  IP?  Not  that  easy! 


It’s  quite  reasonable  for  a  phone 
company  to  want  to  make  a 
buck  off  IP-based  services,  but  it’s 
not  necessarily  going  to  be  easy  to 
do.  The  tried  and  true  techniques 
from  the  phone  world  just  may  not 
fit  all  that  well. 

An  article  in  the  August  Business 
Communications  Review ,  an  old-line 
“phone-think”  publication,  is  about 
“Call  accounting  and  billing  for  IP 
services.”  The  lead-in  for  the  article 
says  to  “Expect  higher  prices  and 
more  complicated  bills  when  Win¬ 
dow  XP  triggers  new  [voice-over-IP] 
services  and  service  providers  roll 
out  new  IP  billing  systems.”  Sweet 
music  to  the  ears  of  traditional 
telecommunications  service  pro¬ 
viders,  indeed.  Too  bad  the  tune  will 


not  be  as  pretty7  in  the  real  world. 

A  basic  assumption  in  the  article  is 
that  voice  over  IP  automatically 
means  that  a  service  provider  can 
send  bigger  bills  to  their  customers. 
But  that  assumption  is  fundamentally 
flawed. 

If  I’m  sitting  at  a  Windows  XP 
machine  at  Harvard  using  the  new 
voice-over-IP  applications  I  could  be 
making  one  of  two  types  of  calls.  I 
could  be  calling  someone  else  on  the 
Internet  or  I  could  be  calling  some¬ 
one  on  the  regular  telephone  system. 
The  latter  is  much  more  likely 
because  there  are  more  than  a  billion 
non-IP  phones  and  only  a  few  IP 
phones.  But  in  both  cases,  there  is  no 
reason  my  local  ISP  would  know  I’m 
doing  anything  with  voice  over  IP. 


If  I’m  calling  someone  else  on  the 
Internet,  my  PC  can  connect  directly 
to  their  PC  or  their  local  proxy  and  all 
the  ISP  sees  is  packets.  I  would  not 
expect  any  quality-of-service  (QoS) 
issues  on  my  end  because  the  local 
net  is  not  all  that  loaded,  and  Harvard 
has  a  big  connection  to  its  ISP.  There 
may  be  QoS  issues  on  the  other  end, 
but  there  is  not  much  I  or  the  local 
ISP  can  do  about  that  any  time  soon. 

If  I'm  calling  someone  on  the 
phone  network  I  need  to  go  through 
an  Internet-to-phone  network  gate¬ 
way.  But  there  is  no  requirement  that 
the  gateway  be  operated  by  the  local 
ISP  or  even  an  ISP  at  all.  It  could  be 
operated  by  a  company  halfway 
around  the  world.  Again,  no  local  ISP 
involvement  and  no  opportunity  to 


add  fees  to  the  bill.  The  company 
operating  the  gateway  can  send  me  a 
bill  but  the  ISP  can’t  unless  I’m  using 
their  gateway. 

Only  if  the  local  ISP  provides 
gateway  or  other  voice-over-IP  ser¬ 
vices  that  are  better  or  lower  cost 
than  my  other  options  will  I  use 
them.  This  is  the  challenge  they  will 
have  to  meet  if  they  expect  to  send 
those  bigger  bills. 

Disclaimer:  “Harvard”  and  “better” 
fit  together  but  “Harvard”  and  “lower 
cost”?  In  any  case,  the  above  opin¬ 
ion  is  mine. 

Bradner  is  a  consultant  with 
Harvard  University’s  University 
Information  Systems.  He  can  be 
reached  at  sob@sobco.com. 


Symantec, 

continued  from  page  35 

Works  and  Internet  Security 
software  suites. 

SystemWorks  2002  features 
GoBack  3  Personal  Edition,  a 
software  program  that  lets 
users  recover  data  in  case  of  a 
system  crash,  a  virus  attack,  a 
failed  software  installation  or 
user  error.  GoBack  returns 
their  system  to  the  time  it  was 
working  properly  and  the  data 
was  intact. 

The  SystemWorks  suite  also 
includes  AntiVirus,  Utilities 
2002  and  CleanSweep  2002. 
Utilities  is  a  tool  set  that 
keeps  hard  drives  organized 
to  maximize  space  and  speed 
access.  It  can  run  continuous¬ 
ly  in  the  background  to  de 
tect  potential  disk  and  system 
problems. 

CleanSweep  removes  un¬ 


wanted  programs,  files  and 
debris  accumulated  by  Web 
surfing. 

The  Internet  Security  2002 
suite  now  includes  Norton  Per¬ 
sonal  Firewall  2002  and  Nor¬ 
ton  AntiVirus  2002.  The  per¬ 
sonal  firewall  controls  all 
Internet  connections  to  and 
from  the  computer  and  blocks 
attempted  intrusions. 

AntiVirus,  SystemWorks  and 
Internet  Security  will  all  sup¬ 
port  Microsoft’s  Windows  XP 
operating  system,  as  well  as 
Windows  NT,  98  and  2000. 

Norton  AntiVirus  2002  will 
be  released  Sept.  1,  while  Nor¬ 
ton  Internet  Security  2002  and 
SystemWorks  2002  will  be 
available  in  mid-September. 
AntiVirus  will  cost  $50,  Inter¬ 
net  Security  will  cost  $70  and 
SystemWorks  will  start  at  $70. 

Symantec:  www. Symantec, 
com 


Cisco, 

continued  from  page  35 

to  make  system  changes. 

By  putting  this  manage¬ 
ment  function  in  a  rack-unit 
appliance,  Cisco  is  targeting 
the  device  at  Web  hosting  ser¬ 
vice  providers. 

The  CiscoWorks  VoIP  Health 
Monitor  software  is  available 
now  and  costs  $20,000.  The 
hardware-based  Cisco  1105 
Hosting  Solutions  Engine  will 
be  available  in  mid-September 
for  $20,000. 

Cisco:  wwrw.cisco.com 
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ip 


Download  Cisco  data 
sheets  on  enabled  network 
solutions  and  VoIP 
readiness  and  follow  our 
links  to  the  latest  VoIP 
news. 


Security  companies  team  to  fight  DoS  attacks 


BY  SAM  COSTELLO 

McAfee,  a  division  of  Network 
Associates,  last  week  said  it 
would  team  with  anti-denial  of 
service  companies  Mazu  Net¬ 
works,  Asta  Networks  and  Arbor 
Networks  to  develop  a  method 
of  stopping  DOS  attacks. 

The  initiative  will  seek  to 
identify  when  networks  are 
under  attack,  but  also  to  deter¬ 
mine  whether  the  systems  in¬ 
volved  in  the  attack  are  acting 
knowingly,  or  whether  they’ve 
been  taken  over  and  are  being 
used  by  attackers,  McAfee  said. 

The  effort  will  see  all  four 
companies  sharing  research, 
expertise  and  data,  says  Stefan 
Savage,  chief  scientist  at  Asta. 
McAfee  will  offer  the  compa¬ 
nies  forensic  data  about  the 
structure,  code  and  behavior  of 
worms  and  viruses,  whereas 
Asta  will  be  able  to  offer  net¬ 
work-level  data  and  tracking, 
he  says. 

Work  resulting  from  the  part¬ 
nership  will  “tie  these  two 
pieces  [forensic  and  tracking] 
of  the  puzzle  together,”  Savage 
says,  adding  that  it  will  also  “let 
us  both  characterize  attacks 
better  and  prescribe  better 
defenses.” 

Sharing  this  information  will 
aid  the  companies  and  their  cus¬ 
tomers  as  “it  will  be  of  overall 
benefit  to  all  of  us  that  we’re  all 


informed  about  what’s  going 
on,”  Savage  says. 

The  partnership  will  not  only 
see  the  exchange  of  data,  but 
will  also  lead  to  updates  and 
added  features  in  existing  prod¬ 
ucts,  according  to  Savage  and 
Vincent  Gullotto,  senior  director 
of  McAfee’s  Avert  Labs. 

“We’re  developing  technol¬ 
ogy  that  will  eventually  end  up 
in  our  products  as  they  are 
today,”  rather  than  in  new  prod¬ 
ucts,  Gullotto  says.  The  first 
fruits  of  this  work  should  start 
to  appear  within  six  months, 
he  says. 

Arbor,  Mazu  and  Asta  are  all 
direct  competitors  in  the  anti- 
DoS  market.  However,  Savage 
has  no  qualms  about  working 
and  sharing  data  with  his  rivals. 

“There’s  a  big  difference  be¬ 
tween  sharing  the  information 
and  being  able  to  use  it,”  Sav¬ 
age  says. 

No  matter  who  can  use  what 
information,  though,  all  sides 
stand  to  benefit,  he  adds. 

“The  value  of  this  relation¬ 
ship  will  come  down  to  how 
much  each  side  puts  in,”  Sav¬ 
age  says. 

McAfee  also  says  it  will  add 
features  to  its  line  of  antivirus 
products  that  will  let  users  iden¬ 
tify,  block  or  eliminate  programs 
that  would  let  an  attack  take 
over  the  user’s  computer  for  use 
in  a  DoS  attack. 


Such  programs,  installed  on 
users’  computers  by  attackers 
or  through  e-mail  or  Web-based 
worms,  turn  the  systems  into 
“zombies,”  machines  that  can 
be  taken  over  without  their 
owners’  knowledge. 

The  Code  Red  II  worm,  which 
emerged  in  early  August  as  vari¬ 
ant  of  the  original  Code  Red 
(although  it  is  related  in  name 
only),  installed  a  backdoor  in 
infected  systems  that  would  let 
an  attacker  gain  access  to  and 
control  over  them. Once  such 
machines  have  been  taken  over, 
they  can  be  used  in  DoS  attacks, 
such  as  the  attacks  that  knocked 
Yahoo,  eBay,  Amazon.com  and 
other  sites  offline  in  the  winter 
of  2000. 

McAfee  says  updates  to  its 
antivirus  products  will  allow  for 
scans  of  incoming  HTTP  traffic 
to  eliminate  such  programs. 

The  first  McAfee  product  that 
incorporates  the  HTTP  scanning 
technology  is  the  company’s 
recently  released  WebShield 
e500  Gateway  device,  says  Tony 
Thompson,  public  relations  rep¬ 
resentative  for  McAfee.  Other 
McAfee  hardware  and  software 
offerings  will  have  the  technol¬ 
ogy  added  in  their  next  up¬ 
grades,  he  says. 

Costello  is  a  correspondent 
with  IDG  News  Services  ’ Boston 
bureau. 
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(‘monitor  sold  separately) 

(‘monitor  sold  separately) 

hp  vectra  vl400 

hp  vectra  vl800 

hp  omnibook  xe3 

Intel®  Pentium®  III  Processor  1GHz 

Intel®  Pentium®  4  Processor  1 ,3GHz 

Intel®  Pentium®  III  Processor  850MHz 

1 28MB  SDRAM 

1 28MB  1  RIMM  PC800  RDRAM 

14.1-in  XGATFT  Display 

20GB  Ultra-ATA66  Hard  Drive 

20GB  Ultra-ATAl  00  7.2K  RPM  Hard  Drive 

128MB  SDRAM 

Intel  Direct  3D  AGP  Video 

ATI  Rage  128  16MB  Video 

20GB  Hard  Drive 

48X  MAX  CD-ROM 

48X  MAX  CD-ROM 

1 ,44MB  Floppy  Drive 

Integrated  PCI  Audio 

Multimedia  KB 

8X  MAX  DVD-ROM 

10/100  Base-TNIC 

10/100  Base-T  NIC 

Integrated  56K  Modem  and  10/100  LAN 

Microsoft®  Windows®  98  SE 

Microsoft®  Windows®  2000 

9-Cell  Lithium-Ion  Battery 

3  Year,  Next  Business  Day, 

3  Year,  Next  Business  Day, 

Microsoft®  Windows'®  98  SE 

Onsite  Warranty 

Onsite  Warranty 

1  Year  Limited  Worldwide  Warranty 

$949 

$1,149 

$1,699 

SKU#  P4151T 

SKU#  P3224T 

SKU#  F2337WT 

you  save  $275 

you  save  $100 

you  save  $300 

hp  netserver  e800 

Intel®  Pentium®  III  Processor  866MHz 
1 33  MHz  Front  Side  Bus 
1 28MB  ECC  SDRAM  Expandable  to  2GB 
Embedded  Dual  Channel  Ultra-2 
SCSI  Controller 
40X  MAX  CD-ROM 
3.5-inch,  1 ,44MB  Flexible  Disk  Drive 
HP  NetServer  Navigator 
3  Year,  Next  Business  Day, 

Onsite  Warranty 

$949 

SKU#  P2457A 

you  save  $490 


hp  netserver  Ip  1  OOOr 

Intel®  Pentium®  III  Processor  866MHz 
1 33MHz  Front  Side  Bus 
256KB  ECC  12  Cache 
256MB  SDRAM 

Embedded  Dual  Channel  Ultra-160 
SCSI  Controller 

Dual  Embedded  10/100  Base-TX  NIC 
24X  Max-Speed  IDE  CD-ROM 
3.5"  1 ,44MB  Flexible  Disk  Drive 
64-Bit  I/O 

1U  Rack-Optimized  Form  Factor 
3  Year,  Next  Business  Day, 
Onsite  Warranty 

$1,499 

SKU#  P1810A 

you  save  $475 


hp  netserver  Ip  2000r 

Intel®  Pentium®  III  Processor  866MHz 
1 33MHz  Front  Side  Bus 
256KB  ECC  L2  Cache 
256MB  SDRAM 

Embedded  Dual  Channel  Ultra-160 
SCSI  Controller 

Dual  Embedded  10/100  Base-TX  NIC 
48X  Max-Speed  IDE  CD-ROM 
3.5"  1 ,44MB  Flexible  Disk  Drive 
3  Open  64-Bit  PCI  Slots 
Redundant  Power  Supply  Option 
2U  Rack-Optimized  Form  Factor 
3  Year,  Next  Business  Day, 
Onsite  Warranty 

$1,999 

SKU*  P1824A 

you  save  $580 


act  now  to 
save  big  on 
select  desktops, 
notebooks,  and 
servers  from  hp 

For  a  limited  time,  HP  is 
offering  hot  desktops, 
notebooks,  and  servers 
at  very  cool  low  prices. 

Call  toll-free,  see  your 
reseller,  or  visit  our 
website  to  receive 
incredible  deals  on 
these  and  other  high- 
quality  hardware 
solutions  that  can  only 
come  from  HP. 

For  a  limited  time 
only.  Offer  ends 
August  31,  2001 . 


pentium®/// 


Call  1 .800.307.6397,  contact  your  local  reseller, 
or  visit  www.hp.com/go/bizsku16 


HP  PCs  use  genuine  Microsoft®  Windows® 
www.Microsoft.com/piracy/howtotell 


Price  is  estimated  street  price.  Actual  price  may  vary.  Monitor  not  included.  Intel,  the  Intel  Inside  logo  and  Pentium  are  registered  trademarks  of  Intel  Corporation.  Microsoft,  Windows  ond  Windows  logo  are  either  registered 
trademarks  or  trademarks  of  the  Microsoft  Corporation  in  the  United  States  and/or  other  countries.  ©2001  Hewlett-Packard  Company.  All  rights  reserved. 


invent 


Don’t  settle  for  yesterday’s  technology. 

•  Faster  and  more  thorough  defragmentation 

•  Network-wide  defragging  from  a  single  system 

•  No  client  software  installation 

•  Easier  to  install,  manage  and  support 

•  Certified  for  Microsoft  Windows  2000  Server 

•  Costs  a  fraction  of  other  defraggers 


why  we’re  a  cut  above  the  rest. 


Try  Defrag  Commander  FREE  for  30  days!  Download  it  at  www.winternals.com/33, 
or  call  toll  free  1-800-237-5138  for  more  information  and  enterprise  pricing. 


Defrag  Commander. 
Making  other  defraggers 

obsolete. 


Defrag  Commander  is  the  fastest,  most 
thorough  and  cost-effective  defrag  tool 
around.  It  manages  the  defragmentation  of 
all  your  networked  Windows®  computers 
from  a  single  system,  eliminating  costly 
client  software  installations  and  end-user 
support  headaches.  Move  up  to  the  new 
enterprise  defrag  solution  —  and  you’ll  see 


*  2001  Wintemals  Software  LP.  All  rights  reserved.  Wintemals  is  a  registered  trademark  of  Winternals  Software  LP. 
Microsoft  and  Windows  are  registered  trademarks  of  Microsoft  Corporation  in  the  US  and/or  other  countries. 
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Ask 


Dr  Internet 


By  Steve 
Blass 

We  work  in  a 
Singapore  bank. 
An  employee  at  a 
branch  office  can 
access  our  intranet 
human  resources 
system  but  can't 
access  our  other  intranet, 
which  is  on  another  server. 
When  the  employee  tries  to 
access  the  other  intranet,  it 
tries  to  establish  a  connection, 
then  he  gets  the  message,  "The 
page  cannot  be  displayed."  Our 
other  branches  can  access  both 
systems. 

The  answer  lies  in  some 
configuration  difference 
between  the  branches.  The 
ability  to  reach  the  human 
resources  server  indicates  that 
the  connectivity  basics  are  in 
place.  Reasons  why  you  can 
reach  one  server  and  not  the 
other  could  lie  in  the  servers,  or 
in  the  network  elements  be¬ 
tween  the  servers  and  the 
client,  or  in  the  network  ele¬ 
ments  between  the  intranet 
servers.  Look  for  traffic -filtering 
rules  in  the  routers  and  fire¬ 
walls  that  refer  to  your  branch- 
office  networks,  and  examine 
them  for  differences  between 
the  branches.  Review  your 
intranet  server  configurations 
for  rules  that  allow  or  deny  con¬ 
nections  based  on  IP  address 
or  domain  names,  and  check 
for  differences  between  your 
branches  there.  Look  in  the 
intranet  server  access  logs  for 
clues  as  to  whether  the  Web 
page  request  is  getting  to  the 
server.  If  the  page  request  is 
getting  to  the  server,  then  look 
at  the  network  elements  be¬ 
tween  the  client  and  server  to 
find  the  culprit  that  is  blocking 
the  return  traffic  to  the  client. 

Blass  is  a  network  architect 
at  Change@Work  in  Houston. 

He  can  be  reached  at  dr.inter 
net@changeatwork.com. 
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_  An  Inside  Look  at  the  Technologies 

and  Standards  Shaping  Your  Network 

Resilient  Packet  Ring  offers  QoS 


BY  RUSS  SHARER 

With  data  traffic  now  sur¬ 
passing  voice  traffic  on  the 
global  public  network,  a 
new  group  of  carrier-grade  technologies 
has  begun  to  emerge.  Circuit,  fixed  band¬ 
width  and  static  provisioning  technolo¬ 
gies,  which  have  been  the  WAN  mainstay, 
are  being  challenged  by  faster,  packet-ori¬ 
ented,  dynamic  and  self-provisioning 
technologies  that  are  used  in  LANs. 

One  promising  technology  is  Resilient 
Packet  Ring  (RPR),  now  being  standard¬ 
ized  by  the  IEEE  802.17  working  group. 
RPR  defines  a  new  media  access  control 
(MAC)  layer  that  is  physical-layer  inde¬ 
pendent  and  is  optimized  to  address  mul¬ 
tiservice  networks  over  ring  topologies, 
particularly  in  metropolitan  and  access 
networks. 

The  MAC  layer  will  work  with  an  Eth¬ 
ernet  physical  layer,  which  initially  oper¬ 
ates  at  10G  bit/sec  or  below,  or  with 
SONET  physical  layers,  which  support 
transmission  monitoring  and  optical 
management. 

Each  MAC  layer  manages  a  series  of 
physical  or  logical  ring  channels  consisting 
of  a  transmit  or  receive  link  on  a  full- 
duplex  Gigabit  Ethernet  link,  a  concaten¬ 
ated  SONET  channel  or  an  added  (trans¬ 
mit)  or  dropped  (receive)  wavelength  in  a 
wave  division  multiplexing  system. 

In  an  RPR  ring,  there  are  at  least  four 
ring  channels,  with  receive  and  transmit 
traffic  flowing  in  opposite  directions.  A 
ring  segment  is  defined  as  the  portion  of 
the  ring  between  two  MAC  layers  or 
nodes  on  the  RPR  network.  The  MAC 
manages  traffic  around  its  ring  segments, 
adding  transmit  traffic  if  the  destination 
is  upstream  or  removing  and  terminating 
traffic  if  its  node  is  the  ultimate  destina¬ 
tion  of  the  data. 

RPR  utilizes  an  Ethernet  physical  layer 
to  minimize  development  costs  and  ride 
the  silicon  volume/cost  curve,  but  the 
MAC  is  not  Ethernet  and  will  not  interop¬ 
erate  directly  with  Ethernet  networks. 
The  change  from  existing  Ethernet  infra¬ 
structure  interfaces  is  the  biggest  draw¬ 
back  of  the  standard.  However,  when 
using  an  Ethernet  physical  layer,  Ethernet 
networks  can  be  bridged  at  the  RPR  net¬ 
work  edge. 

The  other  key  elements  of  the  RPR 
protocol  are  the  virtual  media  identi¬ 
fiers,  which  overlay  virtual  LANs  on  the 
RPR  ring.  Virtual  media  identifiers  are  a 
part  of  the  RPR  frame  header  and  pro¬ 


vide  traffic  management  and  switching 
between  nodes. 

RPR  provides  four  key  attributes: 

•  Dynamic  bandwidth  allocation  — 
Bandwidth  flows  at  the  demand  of  users, 
without  preprovisioning,  to  let  multiple 
messages  simultaneously  move  on  a  ring. 

•  Resiliency  —  RPR  recognizes  ring  or 
node  failures  in  less  than  50  msec.  Once 
a  failure  is  recognized,  traffic  is  rerouted 
on  a  secondary  path  or  in  a  secondary 
direction. 

•  Simplified  provisioning  —  RPR  cre¬ 
ates  data  paths  through  MAC  layer  ad¬ 
dressing,  eliminating  the  need  to  create 


as  committed  data  services  (similar  to 
constant  bit  rate  for  ATM). 

•  Assured  Forwarding  One,  for  time- 
insensitive  overcommitted-class  traffic 
(similar  to  burst  rates  for  ATM). 

•  Best  Effort,  for  delay-tolerant  data 
services. 

Each  RPR  MAC  layer  must  also  support 
cut-through  and  store-and-forward  traffic 
to  let  priority  or  latency  traffic  move 
ahead  of  other  traffic  at  ring  nodes. 

Through  RPR’s  class  of  service,  all 
types  of  carrier  traffic,  from  large  data 
files  to  latency-sensitive  voice  and  video 
transmissions,  can  be  transmitted  on  a 


HOW  IT  WORKS 


Resilient  Packet  Ring 


The  Resilient  Packet  Ring  (RPR)  specification  adds  features  to  the  media  access 
control  layer  that  is  suited  for  running  packets  over  ring  topologies  in  a  metropolitan- 


area  network. 

Q  Traffic  enters  the  RPR 
network  at  node  A  bound 
for  node  C  via  node  B. 


Node  D 


O  If  a  fault  occurs  at  B,  or 
along  either  the  AB  or  BC 
paths,  the  traffic  from  A  to  C 
is  rerouted  within  50  msec 
through  D. 


Node  A 


o  When  traffic  arrives  at  C, 
it  is  removed  from  the  ring. 
Capacity  from  C  to  A  via  D 
is  not  used. 


NodeC 


—  original  traffic  route 

—  unused  route 
---  rerouted  traffic 


connection-oriented  circuits  or  virtual 
circuits.  This  includes  autodiscovery  of 
network  topology,  and  establishing  pri¬ 
mary  and  secondary  switching  routes. 

•  QoS  —  QoS  is  accomplished  by  char¬ 
acterizing  transmitted  traffic  according 
to  its  acceptable  latency  and  jitter  char¬ 
acteristics.  These  characteristics  are  han¬ 
dled  in  a  three-bit  class-of-service  field  in 
the  RPR  frame  header. 

RPR  supports  five  classes  of  service: 

•  Express  Forwarding,  for  time-sensi¬ 
tive  committed-class  traffic,  such  as  leg¬ 
acy  leased  line  or  voice  over  IP. 

•  Assured  Forwarding  Three,  for  time- 
sensitive  committed-class  video  traffic. 

•  Assured  Forwarding  Two,  for  time- 
insensitive  committed-class  traffic,  such 


packet  network. 

Circuits  become  packet  flows  with 
guaranteed  limits  on  delay  and  jitter. 
Point-to-point,  point-to-multipoint  and 
multipoint  peered  networks  can  be 
overlaid  on  the  RPR  MAC  layers.  RPR’s 
class  of  service  makes  it  possible  for 
scalable  service-level  agreements  to  be 
built  in  guaranteed-bandwidth  incre¬ 
ments  of  1M  bit/sec,  with  bursts  up 
to  10M  bit/sec.  It  is  also  possible  to 
establish  circuit-oriented  connections 
through  protocols  such  as  Multi-proto- 
col  Label  Switching. 

Sharer  is  vice  president  of  marketing 
at  Occam  Networks.  He  can  be  reached 
at  rsharer@occam  networks,  com. 
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Occupies  8x  less  space.  Needs  5x  less  electricity.  Serves  4x  more  pages  per 


If  they  gave  a  Nobel  Prize  for  server  economics,  RLX  ServerBlades™would  be  on  the  next 


jumbo  jet  to  Stockholm. 

The  RLX  System  324™  Web  Server  fits  24  blades  in  a  standard  3U  space;  336  in  a  standard 
42U  rack.  (What  will  you  do  with  all  that  extra  space?) 

Suddenly,  data  centers  of  all  sizes  can  experience  the  joy  of  drastically  reduced  electric 
bills.  Bonus:  RLX  ServerBlades  run  so  much  cooler  that  you  can  turn  down  that  air  conditioner. 
Goodbye  goose  bumps,  blue  lips,  and  battered  windbreakers. 

What  about  systems  management?  Systems  management  is  too  fancy  a  name  for  how 


square  foot.  Hot  swaps  In  seconds.  And  arrives  in  no  time.  What’s  not  to  like? 


simple  this  is.  Each  blade  is  NIC-eguipped  for  monitoring  and  reporting.  And  the  RLX  Control 


Tower  makes  it  easy  to  manage  across  servers. 

Pre-loaded  Linux™ software  lets  you  light  up  a  server  in  seconds,  not  hours.  Can  you 
swap  CDs  while  operating  a  moving  vehicle?  This  is  easier  and  less  dangerous. 

Oh,  and  did  we  mention  prices  start  at  just  $999  per  blade? 

Buy  online  at  www.RLXtechnologies.com  or  call  us  at  1.866. RLX. 9866.  Like  the  headline 


says,  orders  delivered  in  days,  not  weeks. 

Be  the  first  on  your  power  grid  to  benefit. 

Redefining  Server  Economics 


®RLX 

technologies 


Technology  Update 


Gearheari  .  inside  the  network  machine  .  Mark  Gibbs 


Revealing  FTP 

So  last  week  we  threatened  you 
with  the  truth  about  the  “SITE” 
command.  This  command  may  seem 
innocuous  —  it  returns  information 


SERVICES 

about  the  server.  Exactly  what  infor¬ 
mation  is  returned  depends  on  the 
server  implementation,  and  the  easi¬ 
est  way  to  check  out  what  a  specific 


FTP  server  will  tell  you  is  to  telnet  to 
Port  2 1  on  the  target  server  and  issue 
a  “SITE”  command: 

220  ftp.someserver.com  ready.  Unau¬ 
thorized  access  prohibited. 

USER  ANONYMOUS 
331  Guest  login  ok,  send  your  com¬ 
plete  e-mail  address  as  password. 


Simple 

Math 

h,Leja(f  Migration 


Not  only  is  TDMolP  superior  to  VoIP  in  its  ability 
to  transparently  deliver  voice,  video  and  data 
over  IP,  it's  also  simpler  and  more  cost-effective. 
RAD's  IPmux  family  of  TDMolP  gateways  is  the 
first  to  extend  Tl/EI  and  T3/E3  circuits  over  IP 
and  protect  existing  investments  in  legacy  PBX 
and  TDM  systems  -  with  no  forklift  upgrades  or 
loss  of  functionality. 


Unique  Access  Solutions 


Learn  more  about  TDMo/P 
at  RAD's  dedicated  Web  site 
www.  TDMolP.  com 


Call  RAD  toll-free  1  -888-747-8868  or  contact  market@radusa.com 

©  Copyright  2001  RAD  Data  Communications 
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vwwv.rad.com/nww/tdmoip 


PASS  ANON@ANON.COM 
230  Guest  login  ok,  access  restric¬ 
tions  apply. 

SITE 

500  ‘SITE’:  command  not  understood. 
This  server  doesn’t  want  to  tell  us 
anything.  Issuing  the  system  type 
command,  “SYST,”  will  tell  us  what 
they  are  running: 

SYST 

215  UNIX  Type:  L8 
And  the  status  command, “STAT,”  will 
tell  us  about  our  session: 

STAT 

211-ftp.someserver.com  FTP  server 
status: 

Version  wu-2.6.0(2)  Wed  Feb  28 
11:35:54  PST  2001 

Connected  to  somenet.net 
(163. 247.121. 110) 

Logged  in  anonymously 
TYPE:  ASCII,  FORM:Nonprint; 
STRUcture:  File;  transfer  MODE:  Stream 
No  data  connection 
0  data  bytes  received  in  0  files 
0  data  bytes  transmitted  in  0  files 
0  data  bytes  total  in  0  files 
89  traffic  bytes  received  in  0 
transfers 

1183  traffic  bytes  transmitted  in  0 
transfers 

1322  traffic  bytes  total  in  0  transfers 
211  End  of  status 

All  of  this  really  doesn’t  give  any¬ 
thing  away.  But  try  the  same  thing  on 
the  FTP  service  on  a  Microsoft  Internet 
Information  Server  (IIS)  FTP  system  (in 
this  case,  Microsoft’s): 

220  CPMSFTFTPA05  Microsoft  FTP 
Service  (Version  5.0). 

USER  ANONYMOUS 
331  Anonymous  access  allowed,  send 
identity  (e-mail  name)  as  password. 
PASS  anon@anon.com 
230-This  is  FTP.MICROSOFT.COM 
Please  see  the  dirmap.txt 

230-file  for  more  information. 

230  Anonymous  user  logged  in. 

SYST 

215  Windows_NT  Version  5.0 
SITE  STATS 
200-ABOR  :  21886 

(Here  are  a  lot  of  stats  about  how 
many  times  each  command  was  used 
such  as  more  than  21,000  aborts 
shown  above  and,  although  we 
haven’t  shown  it,  there  were  just  over 
128,000  login  attempts  since  the 
server  started.) 

200  End  of  stats. 

Basically,  these  kind  of  data  give 
away  a  lot  about  the  site’s  usage.  If  this 
was  a  competitor  of  yours  running  IIS, 
wouldn’t  you  be  interested  to  know 
how  many  FTP  logons  were  attempt¬ 
ed?  And  if  it  were  your  site,  wouldn’t 
you  want  to  switch  off  delivery  of 
such  information?  Guess  what?  You 
can’t.  Such  is  and  always  has  been  IIS. 
Perhaps  you  need  another  brand  of 
FTP  server. 

Revealing  comments  to  gearbead @ 
gibbs.com. 
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SCALABILITY 


IS  STRENGTH 


1  *  that's  fast! 

Optical  IP  Networks 
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Yipes,  the  defining  provider  of  optical  IP  services,  will  change  the  way  you  look  at  bandwidth. 
Our  gigabit  IP-over-fiber  network  lets  you  choose  the  bandwidth  that’s  just  right  for  your  business. 
With  up  to  1  Gbps  in  1  Mbps  increments,  you  get  the  power  you  need,  right  when  you  need  it. 
And  since  the  Yipes  network  is  IP  and  Ethernet  throughout,  you  won’t  need  any  new  equipment 
to  tap  into  its  robust  bandwidth.  Scalable,  secure  and  super  fast.  That’s  the  Yipes  network. 
Want  to  see  the  power  in  action?  Check  out  www.yipes.com  or  call  877-740-6600. 
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Editorial 

Convergence  hasn't 
lived  up  to  the  hype 

Lets  see,  when  did  all  the  hype  about 
convergence  begin?  I  dug  up  a  Net¬ 
work  World  story  from  the  fall  of  1997 
that  described  how  convergence  was 
the  talk  of  N+I. 

Here  we  are  four  years  later,  and  I  think  it’s 
fair  to  say  that  convergence 
hasn’t  made  much  of  a  dent 
in  the  corporate  network. 

In  fact,  Gartner  estimates 
that  IP/'PBX  shipments  consti¬ 
tute  less  than  2%  of  all  PBX 
shipments,  based  on  an  analy¬ 
sis  of  the  market  in  the  fourth 
quarter  of  last  year. 

And  when  Miercom  asked 
nearly  100  voice-over-IP  ven¬ 
dors  to  estimate  what  percent¬ 
age  of  U.S.  voice  traffic  is  trav¬ 
eling  over  an  IP  network  at  least  part  of  the  way, 
the  vendor  estimate  averaged  out  to  nearly  8%. 

However,  the  vendors  also  estimated  that  the 
instaUed  base  for  voice-over-IP  equipment  is 
more  than  70%  service  provider  and  less  than 
30%  enterprise,  which  puts  enterprise-based 
voice-over-IP  traffic  in  the  2%  range.  (See  full 
results  of  the  Miercom  survey  in  our  Technology 
Insider  on  page  46). 

So  why  hasn’t  convergence  taken  off? 

•  According  to  Gartner,  voice  over  IP  was 
never  something  that  customers  asked  for.  It 
was  a  vendor  idea  pushed  by  data  network- 
ing/IP-centric  vendors  like  3Com,  Cabletron 
and  Cisco  to  attack  the  PBX  vendors. 

•  Until  very  recently,  vendor  products  didn’t 
scale  far  beyond  75  end  users. 

•  Standards  are  still  a  mess. There’s  H.323, 
there’s  SIP,  there’s  MGCP.  Gartner  predicts  that 
standards  won’t  be  ironed  out  until  2003. 

•  The  return  on  investment  for  voice  over  IP 
is  difficult  to  prove. 

•  Voice-over-IP  networks  still  can’t  beat  tra¬ 
ditional  voice  for  breadth  of  features,  security 
and  reliability. 

•  New  applications  —  unified  messaging, 
Web-enabled  call  centers  —  have  yet  to  gain 
traction. 

•  Interoperability  remains  a  major  concern. 

•  And  quality  of  service  was  listed  in  the 
Miercom  survey  as  an  important  factor  in  the 
slow  rollout  of  voice  over  IP. 

I  visited  Cisco  earlier  this  year  and  was  very 
impressed  with  the  company’s  voice-over-IP  net¬ 
work,  which  sports  all  the  bells  and  whistles  — 
unified  messaging,  voice  activation,  browser- 
equipped  IP  phones.  So  Cisco  is  indeed  eating 
its  own  dog  food. The  problem  seems  to  be  that 
other  companies  aren’t  biting. 


—  Neal  Weinberg 
Features  editor 
mveinbergAutoline@nww.com 


What  end  users  hate 

Having  just  read  the  story  “What  end  users 
hate  about  you”  (www.nwfusion.com, 

DocFinder:  5722),  I  find  myself  both  agreeing 
and  disagreeing  with  many  of  the  comments 
expressed: 

1 .  Geek  speak  —  Yes,  many  technicians  do 
talk  way  above  the  typical  end  user’s  head. 

On  the  other  hand,  many  IT  people  expect 

end  users  to  have  a  modicum  of  knowledge  about 
computers.  I  can’t  even  guess  at  the  number  of 
times  I’ve  heard  “my  CPU  won’t  turn  on”  when 
it’s  really  the  monitor  the  user  is  talking  about. 

2.  Customer  disservice  —  We  in  IT  do  under¬ 
stand  that  without  end  users  bringing  in  business, 
we  would  not  have  jobs.  But  many  end  users  fail 
to  grasp  that  without  the  tools  we  provide,  they 
would  be  unable  to  get  those  customers.  All 
departments  need  to  be  seen  as  equally  important 
for  an  organization  to  function  properly.  As  for 
the  “they  are  too  important  to  ever  answer  their 
phone”  comment,  far  too  often  I’ve  run  into  peo¬ 
ple  who  would  rather  have  a  “personal  techni¬ 
cian”  handle  all  of  their  problems  so  they  never 
had  to  call  the  help  desk.  Bottom  line:  If  we  didn’t 
ask  for  a  direct  call,  then  call  the  help  desk. 

3.  Service  interruptus  —  Most  organizations 
use  a  help  desk  software  package  with  the  under¬ 
standing  that  the  techs  are  responsible  for  updat¬ 
ing  the  information  in  each  ticket.  Unfortunately, 
this  does  not  always  happen  and  the  manager  of 
that  tech  should  reprimand  the  tech,  or  discipline 
the  tech  if  it  is  a  repeat  offense. 

4.  Covert  missions  —  Admittedly  not  all  corre¬ 
spondence  from  IT  is  as  informative  as  it  should 
be.  On  the  other  hand,  users  need  to  remember 
we  deal  with  a  large  population  of  users  with 
varying  levels  of  computer  knowledge  and  so 
have  to  work  at  the  lowest  common  denominator. 

5.  Impatience  —  IT  people  know  that  users 
sometimes  don’t  follow  instructions  and  repeat 
mistakes.  All  we  ask  is  that  if  we  tell  you  not  to  do 
something,  then  don’t  do  it.  We  try  to  have 
patience,  but  when  faced  with  the  “user-who-just- 
won’t-listen,”  we  tend  to  become  frustrated. 


6.  Inability  to  admit  defeat  —  Valid  point. 
Many  techs  would  rather  leave  the  job  half- 
done  than  (in  their  minds)  lose  face  in  front 
of  end  users.  Also,  techs  sometimes  live  in 
fear  of  being  labeled  as  unknowledgeable  and 
losing  their  jobs  because  some  user  doesn’t 
like  the  “let  me  research  this  problem  I’ve 
never  seen  before”  answer  and  complains  to 
the  tech’s  boss. 

7.  Inflexibility  — The  reasoning  behind  this 
complaint  can  be  sound  in  most  instances.  The 
reasons  are  usually:  1)  the  user  has  no  business 
modifying  the  machine  because  it  is  set  to  do 
everything  the  user  needs  to  do;  and  2)  our  techs 
need  a  standard  to  work  from  because  we  can’t 
afford  to  train  them  in  (literally)  millions  of  soft¬ 
ware  packages. 

8.  Slow  on  the  uptake  —  IT  people  should  fix 
things  as  quickly  as  possible.  “Possible”  includes 
the  time  it  takes  for  IT  to  be  notified  there  is  a 
problem.  If  you  don’t  tell  IT  about  the  problem 
for  days  (or  weeks  or  months),  then  don’t  expect 
us  to  fix  it.  Also  realize  that  a  quick  workaround 
fix  is  not  always  possible. 

Bill  Prentice 
Winston-Salem,  N.C. 

The  common  theme  of  “What  end  users  hate 
about  you”  is  miscommunication  between  the  var¬ 
ious  parties.  One  way  my  company  has  attempted 
to  combat  this  is  by  having  dedicated  IT  staff 
assigned  to  specific  business  areas  so  that  all  the 
players  get  to  know  and  understand  one  another. 
This  has  worked  well  in  most  situations. 

Mack  Curie 
Richmond,  Va. 

Too  bad  “What  end  users  hate  about  you”  does¬ 
n’t  contain  some  examples  of  how  good  manage¬ 
ment  and  departments  do  it  right.  My  company’s 
IT  group  is  outstanding  and  very  responsive. They 
also  run  a  help  desk  that  answers  all  questions,  no 
matter  how  small. 

Phil  Roy 
Director,  solution  center 
Agile  Software 
San  Jose 


Send  letters  to  numews@nww.com  or  John 
Dix,  editor  in  chief,  Network  World,  118 
Turnpike  Road,  Soutbborougb,  MA  01772. 
Please  include  phone  number  and  address 
for  verification. 
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Venture  Over  the  Horizon  .  Kevin  Fong 


The 


DATA  CENTER  TAKES  CENTER  STAGE 


he  future  of  the  data  center  is  a  hot  topic  among 
the  people  I  talk  to  these  days.  Several  issues 
stand  out  whenever  these  discussions  occur. 

One  area  that  elicits  a  great  deal  of  interest  is  the 
problem  of  latency  in  the  network  as  it  relates  to 
retrieving  data  from  storage.  Another  centers  on 
the  skyrocketing  costs  of  network  administration  and 
management. The  effect  of  introducing  distributed 
applications  built  on  Internet  standards,  and  the  chal¬ 
lenge  of  growing  the  data  center  to  meet  the  demands 
of  more  users,  is  also  a  much-debated  topic. The  ques¬ 
tion  of  how  the  future  data  center  will  develop  con¬ 
cerns  both  internal  enterprise  data  centers  and  exter¬ 
nal  service  providers  that  house  applications  and  data 
centers  for  other  companies. 

A  number  of  factors  are  driving  this  focus  on  the 
data  center.  Since  the  mid-1990s,  data  have  been  cre¬ 
ated  at  an  unprecedented  rate.  At  the  same  time,  the 
cost  of  storage  has  dropped  dramatically.  As  a  result, 
rather  than  being  relegated  to  the  edge  of  the  enter¬ 
prise  as  it  was  in  the  past,  data  have  moved  to  the 
center. The  enterprise  data  center  has  always  per¬ 


formed  important  processing  func¬ 
tions,  such  as  online  transaction  pro¬ 
cessing  and  batch  processing.  But  now, 
the  sheer  volume  of  data  that  can  now 
be  stored  has  implications  not  only  for 
what  can  be  done  with  the  data,  but 
also  with  the  very  architecture  of  the 
data  center  itself. 

It  is  no  longer  enough  to  continually  add  servers  as 
demand  grows.As  more  intelligence  evolves  to  the 
routers  and  storage  networks,  the  functionality  of 
servers  decreases.At  the  same  time,  any  network 
involved  in  the  data  center  must  have  the  same  quality 
of  service,  scalability  and  reliability  as  a  telecommuni¬ 
cations  network,  particularly  if  it  is  attached  to  the 
public  network.The  challenges  then  involve  how  to 
move  data  out  of  storage,  classify  them  and  design 
applications  that  create  value-added  opportunities. 

The  venture  community  is  excited  about  the 
opportunities  these  challenges  present  to  fundamen¬ 
tally  rearchitect  the  data  center.  Start-ups  such  as 
3PARdata  (a  Mayfield  investment), YottaYotta  and 


Cereva  Networks  are  developing  storage 
systems  specifically  for  shared  data  cen¬ 
ters.  Desana  Systems  (another  Mayfield 
investment)  is  developing  high-perfor¬ 
mance  hardware  and  intelligent  software 
to  enable  the  rapid  delivery  of  customized 
application  services  from  the  data  center. 
Mayfield  has  also  invested  in  digiMine,  which  pro¬ 
vides  data  warehouse  and  data  mining  services. 

Companies  have  expressed  an  avid  interest  in 
retooling  their  data  centers  to  make  them  more 
information-centric. This  must  be  done  with  a  care¬ 
ful  eye  on  network  administration  and  network 
management  costs.  New  services  must  not  only  be 
easy  to  deploy  but  also  must  not  add  substantially 
to  the  overall  cost.  When  that  balance  is  struck,  data 
centers  can  be  powerful  generators  of  new  services 
and  revenue. 

Fong  is  a  managing  general  partner  with  May- 
field,  a  venture  capital  firm  in  Menlo  Park,  Calif  He 
can  be  reached  at  kfong@mayfield.com. 


On  Security  .  Winn  Schwartau 


TO  HELL  WITH  PROPRIETARY  ENCRYPTION  ALGORITHMS 


I  sat  in  the  front  seat  of  a  Mustang  convertible,  next 
to  the  driver.  In  the  back  seat  sat  The  Third  Man, 
who  was  demonstrating  how  easy  it  is  to  break 
into  a  wireless  network  using  a  laptop,  Global 
Positioning  System,  wireless  LAN  card  and  free 
downloadable  software. 

We  drove  around  Las  Vegas  the  day  before  DefCon 
and  found  an  endless  supply  of  wireless  networks.  How 
do  you  break  in?  Reboot  your  computer,  the  wireless 

access  point  sees  you,  Dy¬ 
namic  Host  Configuration 
Protocol  assigns  you  an  IP 
number,  and  you’re  a  remote 
wireless  node  on  the  net. 

In  only  two  cases  did  we 
find  networks  that  use  the 
Wired  Equivalent  Privacy 
(WEP)  algorithm. WEP  is  fun¬ 
damentally  useless  because  the  26-bit  algorithm  can  be 
routinely  cracked  in  less  than  four  hours,  again  using 
downloadable  tools.  Why  anyone  would  use  wireless 
nets  is  beyond  me,  especially  knowing  that  a  break  and 
enter  is  as  simple  as  firing  up  Windows  from  a  car  or 
the  nearest  McDonald’s. 

So  I  talked  to  folks  who  live  and  breathe  breaking 
through  security  and  encryption.  RSA  Security  just 
announced  a  $2(X),()()0  prize  for  the  crypto-geek  who 
can  successfully  factor  impossibly  large  numbers.That 
reminded  me  that  the  older  and  weaker  RC-4  algo¬ 
rithm  was  cracked  by  a  distributed  processing  assault. 

During  the  last  decade,  companies  have  routinely 
tried  to  crack  proprietary  cryptography.  Visit  www.el 
comsoft.com  for  a  host  of  products  whose  sole  goal  is 
to  crack  password  protection  on  Microsoft  and  other 
major  products  —  ostensibly  to  recover  lost  corporate 


files.  Search  for  “password  crackers”  and  you’ll  find 
every  kind  imaginable.The  cryptography  in  Lotus 
Notes  is  another  victim  of  aggressive  and  successful 
crypto-hacking.And  things  only  get  worse  from  there. 

It  turns  out  that  major  mission-critical,  enterprise¬ 
wide  software  packages  are  just  as  vulnerable  to 
crypto-hacks.  Imagine  if  you  found  that  your  entire 
database  was  not  really  protected  by  “strong  propri¬ 
etary  encryption  algorithms,”  as  the  vendor  claimed;  or 
that  your  payroll  system’s  password  security  was  simi¬ 
larly  vulnerable  because  the  vendor  figured  it  could 
out-design  the  best  cryptographers  in  the  world. 

Later  this  year,  a  group  of  security  professionals 
plans  to  release  a  study  naming  some  top  enter¬ 
prise  applications  with  screamingly  weak  crypto¬ 
graphic  implementations. They  are  especially  focus¬ 
ing  on  embedded  cryptographic  security  for 
database  applications. 

This  study  will  provide  enough  evidence  of  how 
weak  these  “strong  proprietary  cryptographic  algo¬ 
rithms”  are.  But  the  authors  will  stop  one  step  short  of 
releasing  the  step-by-step  methodology  on  how  to 
crack  them.The  goal  is  to  get  vendors  to  ’fess  up  to 
their  crypto-errors  and  then  repair  the  hundreds  of 
thousands  of  vulnerable  systems  deployed  worldwide. 
No  matter;  soon  enough  hacks  such  as  these  become 
public  knowledge,  to  the  benefit  of  malicious  insiders 
and  external  attackers. 

I  don’t  get  it.As  an  industry,  we  have  some  pretty 
good  cryptography  out  there.  Whence  comes  the  arro¬ 
gance  that  applications  vendors  can  do  a  better  job 
than  the  best  mathematicians  and  trained  cryptogra¬ 
phers  the  National  Security  Agency,  Government  Com¬ 
munications  Headquarters  and  academia  can  muster? 

We  have  the  Data  Encryption  Standard  (DES),  which 


still  provides  a  free  and  reasonably  good,  well-tested 
means  of  protection.Triple-DES,  which  is  good  enough 
for  the  banking  community,  is  also  free  and  thoroughly 
understood.The  new  Advanced  Encryption  Standard 
will  take  us  a  “guesstimated”  20  years  forward,  and  RSA 
and  NetworkAssociates  have  stables  of  proven  crypto¬ 
graphic  methods.What’s  with  this  proprietary  stuff? 

Developing  the  best  cryptographic  algorithm  is  a 
battle  the  commercial  software  vendor  should  not 
enter.  With  the  incredibly  complicated  mathematics, 
expensive  and  advanced  technologies,  and  limited  set 
of  skilled  humans,  vendors  are  best  suited  to  imple¬ 
ment  well-known,  open  source,  tested  and  accepted 
cryptographic  approaches. 

My  advice  to  user  companies  is  to  use  approved  and 
well-known  public  algorithms,  not  proprietary  ones. 
Implement  cryptography  carefully,  making  key  man¬ 
agement  your  focus.  Use  trusted  third  parties  for  test¬ 
ing  and  evaluation. 

If  your  vendor  uses  a  proprietary  algorithm  for  any¬ 
thing  you  want  to  protect,  such  as  data  and  passwords, 
run.  If  your  vendor  claims  that  the  proprietary  algo¬ 
rithm  is  secret,  rum.  If  your  vendor  won’t  show  you  or 
the  cryptographic  community  the  engine  that  makes 
its  cryptography  so  great,  run. 

Vendors:  Stick  to  your  strong  suit,  your  business 
application.  Hire  proper  cryptogeeks  and  let  them  do 
the  job  right. The  alternative,  as  we  may  see  in  the  com¬ 
ing  months,  may  be  terribly  painful. 

Schwartau  is  president  of  Interpact  (wunv.interpact 
inc.com),  a  security-awareness  consulting  firm,  and 
author  of  many  books,  including  CyberShock  and  In 
ternet  and  Computer  Ethics  for  Kids  (www.niceki.ts 
net).  He  can  be  reached  at  winn@interpactinc.Ci  <. 
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On  this  page,  the  first 
public  test  of  the  SIP 
protocol,  vendors 
demonstrate  that 
their  products  do 
work  together ...  for 
the  most  part. 
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BY  BETSY  YOCOM,  KENNETH  PERCY 
AND  UWE  BILGER 


the  first  public  test  of  Session  Initiation 
|*i|  Protocol  —  the  challenger  to  the  more 

Mfj  established  H. 323  standard  for  voice- 

ill  over-IP  call  control  —  vendors  proved 

jj§  ig  pH  they  could  achieve  basic  interoperability 
f?  fP'  whh  minimal  tweaking. 

|j|  lit  M'!  But  interoperability  at  more 
■M  |||  H  advanced  levels  proved  more  daunting. 
Hi  m  Only  four  products  —  Cisco  AS5350 
Universal  Gateway,  Indigo  Software  Proxy  Server, 
Mediatrix  APA  III-4FXS  and  SS8  Networks  Signaling 
Switch  —  achieved  basic  and  advanced  interoperabili¬ 
ty  on  all  levels. 

We  found  that  some  of  the  less  mature  SIP  implemen¬ 
tations  lacked  support  for  certain  SIP  commands,  while 
some  vendors  didn’t  support  advanced  functions  such 
as  sequential  and  parallel  forking  and  fax  support.  Some 
vendors  chose  not  to  participate  in  advanced  tests, 
which  were  optional,  because  they  didn’t  support  the 
function  or  because  their  implementation  wasn’t  ready 
for  prime  time. 

The  open  SIP  interoperability  event  was  held  at  Mier- 
com’s  test  facility  in  New  Jersey.  A  dozen  vendors 
(including  RADCom,  which  provided  test  equipment) 
offering  18  products  participated. Vendors  were  asked  to 
prove  basic  interoperability  with  two  reference  prod¬ 
ucts  —  Pingtel’s  xpressa  SIP  phones,  acting  as  SIP  user 
agents,  and  the  dynamicsoft  Session  Management  Suite 
(SMS),  a  SIP  proxy  server. 


Devices  based  on  Session 
Initiation  Protocol  offer 
basic  interoperability,  but 
challenges  remain  for 
advanced  features. 


Basic  interoperability:  User  agents 

Products  tested:  Cisco  (two  products),  CyberTel, 
Difinium,  Indigo  Software  and  Mediatrix. 

Definition:  A  SIP  user  agent  is  a  SIP-enabled  end-user 
device,  which  could  be  a  phone,  a  PC,  a  cell  phone  or 
a  unified  messaging  system.  SIP  supports  setting  up 
and  tearing  down  media  sessions  between  user  agents, 
such  as  “invite”  and  “ack”  (acknowledge). 

Test:  Vendors  had  to  successfully  demonstrate 
their  products  could  place  calls  from  one  user  agent 
to  another  (and  vice  versa)  and  hang  up  the  call. 

Basic  interoperability:  Proxy  servers 

Products  tested:  Indigo  Software,  Mockingbird  Net¬ 
works,  NetCentrex,  SS8  and  Vovida.org. 

Definition:  A  SIP  proxy  server  receives  SIP  mes¬ 
sages  from  user  agents  and  acts  on  their  behalf  in  for¬ 
warding  or  responding  to  those  messages.Their  func¬ 
tion  is  not  unlike  a  gatekeeper  or  call  agent  in  other 
voice-over-IP  environments.  Also,  proxy  servers  add 
sendees,  features  and  scalability  to  SIP  networks. The 
SIP  proxy  server  ty  pically  includes  a  registration  ser¬ 
vice  and  a  SIP  location  database,  in  addition  to  the 
SIP  proxy. 

Test:  SIP  proxy  servers  had  to  demonstrate  the  abil¬ 
ity7  to  interoperate  with  user  agents  in  a  single  SIP 
domain;  with  other  SIP  proxy  servers  in  a  multiple-hop 
network;  and  w  ith  public  switched  telephone  network 
(PSTN)  gateways  in  user  agent-to-analog  phone  tests. 


Basic  interoperability:  PSTN  gateways 

Products  tested:  Cisco,  Mediatrix,  Mockingbird 
Networks  and  Nuera. 

Definition:  SIP-based  public  switched  telephone 
network  gateways  provide  the  interface  between  a 
SIP-based  voice-over-IP  network  and  the  PSTN. 

Test:  The  SIP-based  gateways  had  to  demonstrate 
the  ability  to  process  SIP  calls  to  the  PSTN;  interoper¬ 
ate  with  other  gateways  in  a  multiple-hop  network 
(SIP/IP  trunking);  and  interoperate  with  gateways  via 
ISDN  (primary  rate  interface)  trunking.  (An  Adtran 
Atlas  800  central-office  switch  and  a  Carrier  Access 
channel  bank  were  used  to  switch  analog  calls  and 
trunks.) 

Results  for  all  basic  interoperability  tests 

All  vendors  demonstrated  basic  interoperability 
with  the  Pingtel  xpressa  user  agent  and  the  dynamic- 
soft  SMS  SIP  proxy  server  (see  graphic  next  page). 

However,  this  was  typically  not  achieved  out  of  the 
box.  Some  tweaking  of  code  and  other  technology7 
parameters  was  usually  necessary.  For  example,  during 
the  prestaging,  a  few  vendors  had  to  change  their  SIP 
“invite”  responses  to  operate  with  the  Pingtel  xpressa 
phones.  Others  had  to  load  newer  versions  of  their 
software  to  achieve  the  desired  results. 

Most  vendors  were  testing  with  Version  3  of  SIP, 
which  was  published  in  May.  Differences  in  interpreta¬ 
tions  of  the  specification  did  arise,  and  in  a  few 


instances  we  noted  backward-compatibility  issues 
between  vendors  using  an  older  version  of  SIP  and 
vendors  using  Version  3.  (SIP  is  supposed  to  be  fully 
backward  compatible  with  older  versions.) 

One  problem  concerned  an  outdated  requirement 
on  a  user  agent,  which  user  agents  based  on  the 
newer  version  of  SIP  did  not  recognize.  When  this 
requirement  was  off-loaded  to  a  SIP  proxy,  interoper¬ 
ability  between  the  user  agents  was  achieved. 

Two  notable  issues  concerned  lack  of  support  of 
the  SIP  “options”  request  and  problems  with  the  SIP 
“record-route”  command  on  some  products. 

An  options  request  is  comparable  to  a  handshake 
in  which  SIP  endpoints  communicate  what  parame¬ 
ters  are  supported  end  to  end  and  whether  the  called 
device  is  available  to  accept  calls.  While  it  did  not 
interfere  with  their  ability  to  interoperate  function¬ 
ally,  many  of  the  products  tested  did  not  support  the 
options  request  or  else  implemented  it  incorrectly. 

Problems  with  the  record-route  function,  which 
was  supported  on  the  dynamicsoft  reference  proxy 
server,  had  a  bigger  impact. A  record-route  header  is 
used  to  indicate  routing  between  two  user  agents 
through  a  proxy  server.  Operating  in  record-route 
mode  is  important  to  maintaining  “stateful”  operation, 
in  which  the  proxy  maintains  all  subsequent  signal¬ 
ing  on  that  call. This  signaling  includes  call  detail 
recording  information  (used  for  billing)  and  firewall 
control,  which  are  important  network  functions. 
Incorrect  working  of  record-route  could  also  prevent 
proper  closing  of  a  call. 

According  to  dynamicsoft,  some  vendors  do  not 
now  adequately  support  record-route  because  SIP 
lets  you  conduct  an  interoperable  user-agent-to-user- 
agent  connection  without  using  a  proxy  server.  A 
great  deal  of  development  is  under  way  in  the  user- 
agent-to-user-agent  environment,  where  record-route 
isn’t  an  issue.  It  becomes  more  important,  however, 
in  larger  networks  that  deploy  SIP  proxy  servers. 

We  also  assessed  the  quality  of  voice  calls,  which, 
while  not  part  of  SIP  conformance  interoperability 
testing,  is  important  from  a  functional  perspective. 

All  vendors  demonstrated  “toll  quality  ”  connections 
—  assessed  by  Miercom  engineers,  based  on  a  mean 
opinion  scoring  of  1  (poor)  to  5  (excellent).  A  toll- 
quality  call  was  rated  4  or  above. 

Interoperability  with  each  other 

After  completing  basic  interoperability  tests  with 
the  reference  platforms,  the  vendors  participated  in  a 
free-style  event  in  which  they  attempted  basic  inter¬ 
operability  with  each  other.  (These  results  are  shown 
in  Table  2  on  Network  World  Fusion,  www.nw 
fusion.com,  DocFinder:  5723  )  Intervendor  interoper¬ 
ability,  again,  was  widespread  although  not  at  100%. 

Advanced  interoperability 

Four  participating  vendors  —  Cisco  (via  its  AS5350 
Universal  Gateway),  Indigo  Software  (via  its  Proxy 
Server),  SS8  Networks  (via  its  Signaling  Switch)  and 
Mediatrix  via  its  APA  III-4FXS  —  achieved  basic  and 
advanced  interoperability  on  all  levels. 

Cisco  could  make  the  same  claim  for  its  ATA-186 
Telephony  Adapter  and  7960  SIP  phones,  too.  How¬ 
ever,  because  neither  supports  call  forwarding,  that 
feature  could  not  be  tested  at  the  advanced  level. 
(Cisco  supports  call  forwarding  on  its  proxy  server, 
not  the  user  agent.) 

Problems  at  the  advanced  levels  concerned  inade¬ 
quate  handling  of  sequential  and  parallel  forking  on  the 
SIP  proxies;  and  codec  negotiation  and  fax  support  on 
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RETURN  ON  INVESTMENT  OR  REALLY 
OUTSTANDING  INFRASTRUCTURE? 


BUSINESS.  It’s  all  about  return  on 
investment.  Think  about  it.  There’s  a 
finite  amount  of  money  available.  If  it 
runs  out,  game  over.  And  if  you  make  a 
sizable  IT  investment  in  your  company, 
you’ll  want  to  see  a  return. 

But  where’s  the  “sweet  spot”?  What’s 
the  optimal  investment?  Under  invest  and 
you  run  the  risk  that  your  infrastructure 
(the  hardware,  software  and  services 
underlying  your  business)  won’t  be  able 
to  manage  demand.  Over  invest  and  you 
waste  capital.  Wads  of  it.  You  need  help 
striking  that  magic  balance  and  finding 
the  optimal  investment  to  help  your 
business  prosper. 

Of  course,  you  can  attain  convincing 
returns  by  simply  cutting  costs.  But,  then 
again,  you  could  deploy  our  Return  on 
Web  Investment  (ROWI)  methods  to 


provide  a  framework  for  evaluating  your 
investments.  Designed  by  IBM  Global 
Services,  they  make  measuring  intangibles 
possible  and  help  thousands  of  companies 
tackle  difficult  infrastructure  investment 
questions  every  day. 

Will  moving  a  segment  of  your  business 
online  impact  sales?  Will  streamlining 
your  investments  allow  your  company  to 
implement  processes  faster?  ROWI  can 
provide  the  answers. 

So  whatever  your  individual  needs, 
IBM,  together  with  our  Business  Partners, 
will  help  you  balance  your  spending  and 
find  black  ink  sooner  than  you  think.  For 
more  information,  call  800  426  7080  (ask 
for  invest)  or  visit  ibm.com/e-business/roi 
for  our  latest  white  paper,  to  help  you 
determine  the  ideal  way  to  finance  your 
e-business  infrastructure. 


Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  ©  2001  IBM  Corporation.  All  rights  reserved. 


the  gateways." Forking  is  when  a  proxy  server 
sends  an  “invite”  request  to  more  than  one  location. 

We  found:  Three  out  of  five  SIP  proxies  (Indigo 
Software.  Mockingbird  Networks  and  SS8  Net¬ 
works')  successfully  handled  sequential  forking.  A 
call  was  transferred  by  the  reference  proxy  and  sub¬ 
sequently  rung  on  three  different  user  agents  in 
sequence  —  a  function  that  is  necessary  to  success¬ 
fully  deliver  “find-nie/follow-me”  support. 

c  Only  two  out  of  five  proxies  (Indigo  Soft¬ 
ware’s  and  SS8  Networks’)  successfully  demon¬ 
strated  parallel  forking.  A  call  was  transferred  from 
the  proxy  to  three  different  user  agents  —  all  at 
the  same  time. This  feature  is  employed  when  a 
user  wants  calls  to  ring,  for  instance,  on  a  cell 
phone,  business  phone  and  PC  at  the  same  time. 

•  We  also  encountered  some  problems  with 
codec  negotiation.  In  one  instance,  a  vendor’s 
user  agent  expected  to  receive  a  codec  list  in  all 
upper  case.  And  when  it  was  received  in  lower 
case  from  the  Pingtel  reference  user  agent,  the 
call  was  set  up,  but  a  voice-over-IP  media  stream 
was  not  sent. 

•  Fax  support  based  on  theT.38  specification 
was  another  issue.  Cisco  and  Nuera  demonstrat¬ 
ed  faxing  based  on  pulse-code  modulation,  but 
no  vendor  successfully  demonstrated  interoper¬ 
ability  based  on  the  ITU-T’s  newer  T. 38  fax¬ 
encoding  specification.  Cisco  and  Mediatrix 
claim  support  forT.38,  but  they  did  not  test  it 
for  interoperability.  Problems  withT.38  fax  inter¬ 
operability,  however,  are  reportedly  more  often 
related  to  the  codec  implementation  than  to  SIP 
call-control  signaling.  SIP  defines  only  the  signal¬ 
ing  messages,  and  allows  anything,  including 
voice,  fax  or  video,  to  go  into  the  body  of  the 
message. 


SIP  interoperability 


We  tested  interoperability  between  vendor  products  and  two  "refer¬ 
ence"  products  —  a  Pingtel  xpressa  SIP  phone  (user  agent,  or  UA) 
and  a  dynamicsoft  Session  Management  Suite  SIP  proxy  server.  The 
basic  tests  were  mandatory;  the  advanced  tests  were  optional. 


Conclusion 

We  found  that  SIP-based  basic  interoperability 
works,  and  works  well.  SIP  is  a  relative  youngster 
compared  with  the  ITU’s  H.323  specification  for 
voice-over-IP  call  control,  and  to  achieve  this  level 
of  interoperability  so  quickly  via  SIP  is  impressive. 

But  there’s  work  to  be  done  on  the  more 
advanced  functions,  and  it’s  apparent  that  some 
conformance  issues  remain  to  be  solved.  Still, 
users  can  expect  rapid  development  on  SIP-based 
advanced  functions  as  the  business  cases  for 
implementing  SIP  become  more  pervasive. 


Product 

Basic  Interoperability 

Advanced  Interoperability 

SIP  user  agents 

•  UA-to-UA  direct  call, 
no  proxy  server 

•  UA-to-UA,  through  SIP 
proxy  server 

•  UA-to-analog-phone, 
through  SIP  proxy  server 

Call 

transfer 

Conference 

calling 

Call 

forwarding 

Cisco  ATA-186  telephony  adapter 

®  0  • 

* 

9 

9 

Cisco  7960  SIP  phone 

<i  9  & 

9 

9 

9 

Difinium  Mercury 

090 

9 

3 

9 

Indigo  Software  SIP  User  Agent 

mmm 

9 

9 

9 

Mediatrix  APA  III-4FXS 

$  $  9 

9 

9 

9 

CyberTel  CyberCom  Server  Class 

®  ®  # 

9 

9 

9 

SIP  proxy  servers 

•  UA-to-UA,  through  reference 
SIP  proxy  server 

•  UA-to-UA,  through  multiple 

SIP  proxy  servers 

•  UA-to-analog  phone,  through 
SIP-based  PSTN  gateways 

Transport 

negotiation 

Sequential 

forking 

Parallel 

forking 

Loop 

detection 

Indigo  Proxy  Server 

9  9® 

® 

9 

9 

• 

Mockingbird  SIP  server 

«  9  • 

9 

3 

9 

9 

NetCentrix  call  control  server 

•  @  • 

9 

9 

9 

9 

SS8  Signaling  Switch 

•  3  • 

9 

• 

9 

9 

Vovida.org  Vocal 

•  9  9 

9 

9 

9 

9 

4 

SIP-to-PSTN  gateways 

•  UA-to-analog  phone,  through 
SIP  proxy  server 

•  SIP/IP  trunking,  analog  phone 
through  PSTN  gateways 

•  PRI  trunking,  UAto  UA 
through  PSTN  gateways 

Codec 

negotiation 

Transport 

negotiation 

(TCP-UDP) 

Fax 

support 

Reinvite 

method 

support 

Cisco  AS5350  Universal  Gateway 

®  •  • 

9 

• 

9 

9 

Mediatrix  APA  III-4FX0 

«  «• 

9 

9 

9 

9 

Mockingbird  Nuvostream  multiprotocol  server 

•  •  9 

9 

9 

9 

9 

Nuera  0RCA  GX-8 

•  •  • 

9 

9 

9 

9 

®  Successful  interoperability  •  Not  tested 


•  Not  supported 


Yocom  is  senior  editor,  Percy  is  technology 
analyst  and  Bilger  is  senior  lab-test  engineer  at 
Miercom,  an  independent  testing  lab  located  in 
Princeton  Junction,  NJ.  They  can  be  reached  at 
byocom@mier.com;  kpercy@mier.com  and 
ubilger@mier.com. 


Jumping  through  loops 


On  the  Session  Initiation  Protocol 
proxies,  we  also  tested  the  ability  to 
handle  spiral  loops,  which  are  nec¬ 
essary  to  move  a  call  through  several 
forwardings,  including  from  one 


domain  to  another,  without  losing  it. 
Only  Indigo  Software  and  Mocking¬ 
bird  Networks  attempted  the  tests. 
However,  differences  in  opinion 
among  vendors  about  the  proper  out¬ 


come  precluded  a  clear  resolution  of 
this  interoperability  test.  Mockingbird 
and  Indigo  Software  cited  ambigui¬ 
ties  in  the  SIP  specification  and  the 
test  methodology. 


U| 

E-  ■> 


This  was  the  first  public  Session  Ini¬ 


tiation  Protocol  event.  Previous  SIP 


interoperability  forums  have  been 

closeiJ-door  sessions  in  which  vendors 

-  ,  • 

have  tested  conformance  of  their  prod¬ 
ucts  with  SIP  and  ironed  out  various 
itK  issues  relative  to  interpretation  of  the 
SIP  specification. 

This  public  on-the-record  event  (co¬ 
sponsored  by  Miercom,  a  Network 
*" World  Global  Test  Alliance  partner,  and 
Network  World)  was  designed  to  test 
basic  interoperability  on  a  functional 

•  : 


level.  We  sought  to  find  if  SIP-based 
products  could  place  calls,  achieve  an 
adequate  level  of  voice  quality,  and 
hang  up. 

Vendors  that  Miercom's  research 
determined  were  implementing  SIP  with¬ 
in  their  voice-over-IP  products  were 
invited  to  participate.  Ground  rules  for 
the  event  established  that  vendors  would 
have  three  days  of  prestaging  to  iron  out 
any  kinks  before  going  on  the  record 
with  results. 

Miercom  agreed  that  issues  identified 
and  ironed  out  during  the  prestage  would 
not  be  a  part  of  the  public  record, 
although  we  would  assess  and  discuss 


the  nature  and  scope  of  these  problems. 
Any  vendor  that  could  not  successfully 
establish  basic  interoperability  after  the 
three-day  preliminary  period  was  free  to 
leave  before  the  public  event  took  place. 
No  one  did.  And  so,  everything  that  fol¬ 
lowed  was  on  the  record. 

Participating  vendors  were  asked  to 
prove  basic  interoperability  with  two  ref¬ 
erence  products  —  Pingtels  xpressa  SIP 
phones,  acting  as  SIP  user  agents,  and 
the  dynamicsoft  Session  Management 
Suite  (SMS),  a  prominent  SIP  proxy 
server.  These  products  were  chosen 
based  on  two  criteria:  our  research 
showed  that  they  were  widely  regarded 


as  among  the  most  mature  SIP  implemen¬ 
tations  of  their  type  currently  available; 
and  interviews  with  other  vendors  and 
end  users  indicated  that  these  products 
would  be  the  most  likely  to  interoperate 
with  other  vendors'  equipment. 

Testing  was  based  on  the  lETF's  SIP 
RFC  2543bis-03  (Version  3  of  the  SIP 
specification  which  was  an  Internet 
draft  at  the  time).  (For  complete  details 
on  this  specification,  see  www.ietf.org). 
Three  basic  types  of  voice-over-IP 
equipment  were  represented:  SIP  user 
agents,  SIP  proxy  servers  and  SIP-based 
public  switched  telephone  network 
gateways. 
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Survey  says  deployment  is  being  slowed  by  too  many  standards,  not 
enough  interoperability  and  concerns  over  quality  of  service. 


BY  EDWIN  MIER,  NETWORK  WORLD  GLOBAL 


TEST  ALLIANCE 


Voice  over  IP  isn’t  making  much  of  an 
impact  in  companies  just  yet,  but 
deployments  are  expected  to  pick 
up  considerably  in  the  next  two 
years,  according  to  the  results  of  an 
exclusive  Miercom/Network  World 
survey  of  nearly  100  voice-over-IP 
equipment  vendors. 

To  get  a  sense  of  where  the  voice-over- 
IP  market  is  and  where  it’s 
headed,  Miercom  received  detailed 
responses  from  96  voice-over-IP 
equipment  vendors  including 
3Com,Altigen,Avaya,  Cisco,  Clar- 
ent,  ECI  Telecom,  Ericsson,  Lucent, 

Motorola,  Nortel,  Nuera,  Shoreline, 

Siemens  and  Sphere. 

When  asked  how  much  of  the  total 
U.S.  voice  traffic  is  traveling  over  IP,  the  ven¬ 
dors  estimated  that  nearly  8%  of  all  calls  today 
travel  at  least  part  of  the  way  on  an  IP  network. 
They  also  estimate  that  the  voice-over-IP 
installed  base  today  is  more  than  70%  carriers 
and  ISPs,  and  less  than  30%  enterprise  net¬ 
works. That  means  voice  over  IP  in  the  enter¬ 
prise  represents  closer  to  2%  of  total  U.S.  voice 
traffic. 

Vendors  are  painting  a  rosy  picture  of  the 
future,  however. They  predict  that  in  five  years 
more  than  36%  of  U.S.  phone  calls  will  be  voice- 
over-IP-based.  And  most  predict  the  imbalance 
between  service  provider  deployments  and 
enterprise  deployments  will  begin  to  level  out 
over  the  next  two  years.  Fifty-five  percent  say 


they  believed  voice-over-IP  port  shipments  over 
the  next  two  years  will  be  closer  to  a  50/50  split. 

Protocol  proliferation 

On  the  issue  of  standards,  we  found  that  Ver¬ 
sion  2  of  the  ITU-T’s  H.323  specification  still 
reigns  as  the  most  commonly  implemented 
voice-over-IP  call-control  standard.  But  that  is 
likely  to  change  in  the  next  year. 

While  few  respondents  say  they  are 
planning  to  add  H.323  Version  2  sup¬ 
port  (as  nearly  three-fourths  say 
they  already  do),  more  than  half 
plan  to  add  support  for  the  latest 
version  of  the  IETF  Session  Initia¬ 
tion  Protocol  (SIP)  and/or  the  ITU- 
T’s  new  H.248  voice-over-IP  call-con¬ 
trol  standard  (see  graphic,  right). 

With  30%  of  vendors  claiming  to  already 
support  SIP,  and  51%  more  planning  to  add  SIP 
support,  more  than  81%  of  the  industry  could 
be  supporting  SIP  by  next  summer. 

Media  gateway  control  protocol  (MGCP)  sup¬ 
port,  which  seemed  neck  and  neck  with  SIP 
support  just  a  few  months  ago,  appears  to  have 
lost  some  momentum.  About  half  of  the  voice- 
over-IP  vendors  say  they  expect  to  be  support¬ 
ing  MGCP  by  next  year. 

The  choice  of  which  control  protocol  to 
implement  is  key  for  different  vendors’  voice- 
over-IP  gear  to  be  able  to  interoperate.  And  this 
proliferation  of  protocols  does  not  bode  well 
for  ubiquitous  voice-over-IP  interoperability  any- 

Continued  on  page  54 


The  changing  VoIP  landscape 


Percent  of  vendors  currently  supporting  the  protocol  in  their  products. 
Percent  of  vendors  planning  to  add  support  within  the  next  year. 


H.323  Version  2 
H.323  Version  3 
H.323  other  versions 
SIP,  (orig.  RFC  2543) 

SIP,  (latest  specs) 

MGCP,  (orig.  RFC  2705) 

MGCP,  (latest  specs) 

H.248  (Megaco) 

Other 
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How  much  delay  is  acceptable? 

"In  your  opinion,  what  is  the  maximum  end-to-end, 
one-way  latency  that  is  acceptable  to  'most'  people 
for  real-time  voice  communications?" 

■■  Percent  of  vendors  who  said 
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Continued  from  page  52 

time  soon.  We  note,  too,  that  most  of  these  proto¬ 
cols  represent  very  large  and  complex  software 
implementations,  where  interoperability  between 
vendors  is  measured  in  degrees. 

Interoperability  issues 

We  asked  if  two  vendors’  systems  running  the 
same  standard  protocol  would  interoperate. The 
chances  are  only  about  one  in  three  that  two  sys¬ 
tems  would  interoperate  today  “to  a  fair  extent,” 
functionally  speaking,  out  of  the  box. That’s  not 
very  reassuring  to  users. 

The  chances  are  improved  to  better  than  one  in 
mo,  however,  that  some  technical  jury-rigging 
would  allow  them  to  interwork  to  a  fair  extent.The 
vendors  optimistically  project  that  in  two  years  the 
chances  that  two  systems  will  interoperate  to  a  fair 
extent  “out  of  the  box”  rises  to  two  out  of  three. 

Are  today’s  leading  voice-over-IP  protocols  the 
ones  that  will  be  the  basis  for  interoperability  in 
two  years,  or  will  still  more  new  voice-over-IP 
protocols  be  needed?  There  are  enough  already 
—  80%  of  respondents  say  interoperability  in  two 
years  will  be  based  on  today’s  protocols. 

Is  a  two-year  timetable  toward  interoperability 
reasonable?  The  vendors  were  asked:  In  what 
year  do  you  expect  most  voice-over-IP  equip¬ 
ment  (greater  than  50%)  will  be  generally 
interoperable?  The  clear  majority  of  them,  nearly 
70%,  were  split  over  whether  this  would  occur  in 
2002  or  2003.  That  should  help  users  who  are 
tying  their  voice-over-IP  purchase  plans  to  the 

VoIP  pros  and  cons 

Main  factors  driving  VoIP,  by  percent  of  respondents: 

Facilitates  voice  and 
data  convergence 

Enables  new 
features,  services 
and  capabilities 

Is  more  efficient 

Is  technologically 
more  elegant 

Other 
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Main  issues  inhibiting  VoIP,  by  percent  of  respondents: 

Falls  short  of 
most  users'  expectations 

Inadequate  training, 
education,  expertise, 
technical  skills/staff 

Is  technologically 
more  complex 

Too  many  standards 
Other 
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Conduct  of  survey 

On  June  1  Miercom,  in  collabo¬ 
ration  with  Network  World, 
launched  its  third  annual  survey  of 
the  voice-over-IP  industry.  This 
article  represents  an  exclusive 
first  look  at  the  results  of  the  data 
garnered  by  that  survey.  The  first 
Miercom  voice-over-IP  survey, 
conducted  in  1999,  was  delivered 
via  a  mix  of  e-mail,  regular  mail 
and  fax. 

This  year's  survey  was  distrib¬ 
uted  to  336  addressees,  more  than 
twice  as  many  as  last  year's.  All  of 
these  were  believed  to  be  suppli¬ 
ers  of  voice-over-IP  products  in 
some  form.  We  eliminated  res¬ 
ponses  from  companies  that,  it 
turned  out,  did  not  produce  voice- 
over-IP  hardware  or  software  — 
including  service  providers  and 


resellers.  We  ended  up  with  96 
valid  responses,  which  we  esti¬ 
mate  represents  about  40%  to  45% 
of  the  entire  voice-over-IP  vendor 
community. 

We  asked  respondents  what 
specific  categories  of  voice-over- 
IP  product  they  offered  (multiple 
category  selections  were  allowed). 
The  top  categories  in  which 
respondents  offer  products  are 
voice-over-IP  gateways  (57%), 
voice-over-IP  call  controllers 
(47%),  IP  PBXs  (37%),  software  for 
end  users  (32%),  IP  phones  (26%), 
software  for  developers/integrators 
(20%),  integrated  access  devices 
(18%),  board-level  products/com¬ 
ponents  (11%)  and  voice-over-IP- 
oriented  test  equipment  (7%). 

We  also  asked  whether  the  ven¬ 
dor  sold  mainly  to  carriers  and  ser¬ 
vice  providers,  to  enterprise  cus¬ 
tomers,  to  both  of  these  markets 


without  distinction,  or  to  value- 
added  resellers  (VAR)  and  system 
integrators.  Forty-five  percent  said 
they  sold  mainly  to  carriers  and 
service  providers,  while  19%  said 
they  sold  mainly  to  corporations 
and  end  users.  Thirteen  percent 
said  they  sold  to  both  markets 
without  distinction,  while  11% 
said  they  sold  mainly  to  VARs  and 
system  integrators, 

All  respondents  could  have 
checked  a  box  on  the  survey  form 
requesting  anonymity,  indicating 
they  did  not  wish  to  be  identified  as 
the  source  of  their  particular 
responses.  Several  did  check  this 
option,  and  their  anonymity  wishes 
have  been  honored. 

A  series  of  follow-up  surveys 
were  also  conducted  for  more  in- 
depth  analyses  of  specific  product 
categories,  including  gateways, 
call  controllers  and  IP  PBXs. 


advent  of  interoperability. 

We  also  asked  vendors  to  name  the  main  fac¬ 
tors  frustrating  interoperability. The  most  cited 
factor,  by  54%  of  respondents,  is  too  many  stan¬ 
dards. The  next  most  prevalent  response,  by  53%, 
is  that  marketplace  pressure  for  product  differen¬ 
tiation  —  that  is,  unique  features  and  capabilities 
—  is  making  interoperability  difficult. Two  other 
leading  causes,  both  cited  by  49%  of  respondents, 
are: “Certain  leading  vendors  are  not  serious 
about  interoperability,”  and  “the  voice-over-IP  stan¬ 
dards  are  too  complex.” 

Latency  is  key 

We  also  asked  the  respondents,  most  of  them 
product  managers,  several  questions  about  voice- 
over-IP  performance  and  voice-over-IP  voice  qual¬ 
ity.  The  most  significant  factor  affecting  voice 
quality  is  latency.  As  a  follow-up  question,  we 
asked  the  respondents  what  they  thought  the 
maximum  one-way,  end-to-end  latency  acceptable 
to  most  people  was  (see  chart,  previous  page). 

In  years  of  testing,  we  have  found  most  people 
will  begin  to  notice  latency,  even  begin  to  be 
annoyed  by  it,  as  it  rises  above  150  msec. While 
28%  of  respondents  agree  that  1 50  msec  is  the 
high  end  of  most  people’s  latency  tolerance,  one- 
third  of  respondents  say  that  delays  up  to  250 
msec  are  tolerable  by  most  people. 

At  that  point,  which  is  akin  to  the  latency  of  a 
voice  call  sent  via  a  high-orbit  geosynchronous 
satellite,  callers  would  certainly  be  aware  of  the 
delay  and  probably  also  be  annoyed  by  it.  Clearly 
some  vendors  think  consumers  are  willing  to  rou¬ 
tinely  accept  anomalous  voice-over-IP  voice  qual¬ 
ity,  presumably  as  a  trade-off  to  other  factors,  such 
as  low  costs  for  phone  calls. 

Pros  and  cons 

We  asked  the  vendors  to  name  the  main  factors 
that  promote  and  propel  voice  over  IP,  as  well  as 
the  main  factors  that  inhibit  or  impede  voice  over 
IP’s  acceptance.  In  each  case  we  offered  a  half- 
dozen  check-box  responses,  plus  space  to  write 
in  “other”  reasons  (see  chart,  left). 

Clearly  the  ability  to  move  voice  and  data  onto 
the  same  transport  network  is  the  most  prevalent 
factor  favoring  and  promoting  voice  over  IP  Other 


sales  points  are  derived  from  the  consolidation  of 
voice-  and  data-network  management,  and  cost  sav¬ 
ings  by  reducing  transport  costs.  Another  major  fac¬ 
tor  promoting  voice  over  IP  is  that  it  enables  new 
services,  features  and  capabilities.  Examples  include 
unified  voice  and  e-mail  messaging,  and  various 
computer-telephony  integration  applications. 

The  main  factors  inhibiting  voice-over-IP  domi¬ 
nance  are  more  varied.  Lack  of  interoperability  and 
the  dearth  of  voice-over-IP  expertise  are  two 
important  factors  —  affecting  availability  of  trained 
staff  and  even  customer  education.Too  many  stan¬ 
dards  and  technological  complexity  were  other 
leading  reasons.The  most  prevalent  write-in 
response  was  that  lack  of  ubiquitous  quality  of  ser¬ 
vice  (QoS)  continues  to  delay  voice-over-IP  deploy¬ 
ment.  Others  cite  the  relative  immaturity  of  voice- 
over-IP-based  advanced  features  and  functions,  as 
well  as  large-scale  performance  and  scalability. 

Conclusion 

Based  on  the  survey  responses,  there  is  gen¬ 
eral  agreement  on  several  key  trends  regarding 
voice  over  IP.  For  one,  most  gear  has  been  de¬ 
ployed  by  carriers  and  service  providers,  but 
shipments  to  corporations  over  the  next  two 
years  are  expected  to  balance  that  out. Also,  as 
much  as  8%  of  U.S.  phone  calls  today  are  being 
carried  to  some  extent  in  voice-over-IP  form,  and 
that  will  rise  to  a  projected  36%  in  five  years. 

Interoperability,  stymied  by  too  many  compet¬ 
ing,  complex  protocols,  should  improve  consider¬ 
ably  within  the  next  two  years,  the  respondents 
agree. They  note,  too,  that  widespread  QoS 
deployment  needs  to  occur,  and  nifty  new  voice- 
over-IP  features,  functions  and  applications  need 
to  proliferate. 

Mier  is  founder  of  Miercom,  a  network  consul¬ 
tancy  and  product  test  center  in  Princeton  Junc¬ 
tion,  NJ.He  can  be  reached  at  ed@rnier.com. 

Miercom  is  also  a  member  of  the  Network 
World  Global  Test  Alliance,  a  cooperative  of  the 
premier  reviewers  in  the  network  industry,  each 
bringing  to  bear  years  of practical  experience  on 
every  review.  For  more  Test  Alliance  information, 
including  what  it  takes  to  become  a  member,  go 
to  www. nwfusion.com/alliance. 


Before  Code  Red,  there 
was  distributed  denial 
of  service.  While  dis¬ 
tributed  DoS  attacks 
have  not  been  the 
attack  du  jour  as  of  late,  they  are 
still  a  strong  threat  to  any  network, 
providing  the  ability  to  cripple 
even  the  highest-bandwidth  pro¬ 
viders.  Distributed  DoS  attacks  are 
so  threatening  because  they  are  dif¬ 
ficult  to  identify. 

Once  identified,  it  is  just  as  diffi¬ 
cult  to  defend  against  them.Traffic 
filters  are  the  best  solution,  but  they 
must  be  manually  implemented  and 
they  often  also  block  legitimate  net¬ 
work  traffic. The  distributed  nature 
of  the  attack  makes  prevention  virtu¬ 
ally  impossible  because  you  never 
know  where  the  next  attack  will 
come  from. 

Mazu  Networks’  TrafficMaster 
Inspector  helps  solve  some  of  these 
problems  by  providing  a  way  to 
identify  distributed  DoS  attacks 
in  real  time  on  large,  high-speed 
networks. 

While  Inspector  identifies  distrib¬ 
uted  DoS  attacks,  it  does  not  provide 
any  assistance  in  filtering  the  identi¬ 
fied  attacks.  (Mazu  Networks’ 
Enforcer  gateway,  due  later  this  sum¬ 
mer,  will  provide  this  capability.) 

Inspector  resides  upstream  at  the 
core  of  the  network  infrastructure 
and  passively  observes  all  traffic 
entering  or  leaving  the  network.  It 
can  reside  anywhere  on  the  net¬ 
work,  but  works  best  near  the  first- 
level  routers,  where  it  can  directly 
monitor  traffic  to  and  from  the 
Internet. 

Inspector  connects  to  the  data 
path  via  a  passive  optical  or  copper 
splitter,  which  introduces  no  latency 
into  the  network  and  performs 
detailed  analysis  in  real  time.  Other 
distributed  DoS  solutions  (from 
companies  such  as  Asta  Networks 
and  Arbor  Networks)  receive  a  sam¬ 
ple  of  network  traffic  from  routers 
for  analysis.  Inspector  sits  directly 
on  the  network  connection  and 
monitors  all  traffic,  independent  of 
the  network  routers  for  packet 
information.  One  reason  Mazu’s 
solution  is  so  expensive  ($100,000) 
is  that  the  company  had  to  develop 
a  product  that  truly  supported 
gigabit  traffic  levels. 

Off  to  a  good  start 

Overall,  Mazu  has  a  great  start  in 
developing  a  fast,  efficient  distrib¬ 
uted  DoS  solution.  Its  approach  to 
separate  monitoring  and  defense 
mechanisms  does  not  make 
Inspector  an  optimal  solution  on 
its  own.  If  we  have  a  tool  that 
helps  identify  a  distributed  DoS 
attack,  we’d  also  like  that  tool  to  at 


Get  a  positive  ID 
on  DDoS  attackers 

H/laxu's  TrafficMaster  Inspector  a  good 
first  step  in  identifying  DDoS  attacks. 


BY  MANDY 

least  recommend  how  to  best 
defend  against  the  current  attack. 

We  would  probably  wait  until  the 
Enforcer  component  becomes  avail¬ 
able  (Mazu  says  Sept.  1)  to  provide 
a  complete  defense  mechanism. 

Analysis 

Inspector  examines  packets  on  dif¬ 
ferent  metrics  defined  by  the  admin¬ 
istrator  and  statistically  determines 
whether  an  attack  is  occurring.These 
metrics  can  include,  but  are  not  limit¬ 
ed  to,  packet  size,  source  address, 
time  to  live  (TTL)  and  payload. 

For  example,  while  attackers  may 
spoof  the  source  address  on  a  pack¬ 
et,  they  cannot  make  changes  to 
other  aspects  of  the  packet,  such  as 
payload.  Inspector  makes  it  difficult 
for  an  attacker  to  launch  a  surge  of 
network  traffic  without  introducing 
an  anomaly  that  it  is  able  to  detect. 
This  includes  unusual  variations  or 
lack  of  variation  in  payload,  port 
numbers, TTL  and  other  metrics. 


ANDRESS 

Inspector  has  two  main  compo¬ 
nents:  the  probe  and  the  cluster 
head.  Probes  are  individual  sensors 
that  can  be  distributed  throughout  a 
network  to  capture  and  analyze  traf¬ 
fic.  (They  support  up  to  eight  Gigabit 
Ethernet  links.)  The  cluster  head  is 
the  master  probe,  or  central  report¬ 
ing  device. All  probes  report  to  the 
cluster  head,  which  combines  the 
data  for  a  more  thorough  analysis 
and  “big  picture”  of  the  network. 

Within  an  Inspector  probe,  three 
main  components  are  at  work:  user- 
level  Mazu  module,  Mazu  Kernel 
module  and  Mazu  device  driver.  The 
user-level  module  is  the  brains  of 
the  product.  It  performs  the  packet 
analysis  looking  for  anomalies  that 
could  be  distributed  DoS  attacks. 
The  Kernel  module  is  optimized  for 
rapid  packet  classification  and  rout¬ 
ing  to  keep  any  latency  introduced 
by  its  presence  to  an  absolute  mini¬ 
mum.  The  device  driver  optimizes 
packet  processing,  enabling  Inspec¬ 
tor  to  quickly  and  efficiently  cap¬ 
ture  packets  off  the  network. 


TrafficMaster  Inspector  Version  4.0 

RATING:  3.9  COMPANY:  Mazu  Networks,  (61 7)  354-9292,  www.mazunetworks.com  COST:  Starting 
at  $1 00,000.  PROS:  Fast  and  efficient  monitoring;  accurate  attack  recognition.  CONS:  Expensive;  no  filtering 
recommendations. 

Analysis  Administration  Effectiveness  Cost  Total 
_ 35% _ 30% _ 25% _ 10%  score 

TrafficMaster  Inspector _ 5 _ 4 _ 3 _ 2 _ 3.9 

Individual  category  scores  are  based  on  a  scale  of  1  to  10  Percentages  are  the  weight  given  each  category  in  determining  the  total 
score.  Scoring  key:  5:  Exceptional  showing  in  this  category.  Defines  the  standard  of  excellence;  4:  Very  good  showing. 
Although  there  may  be  room  for  improvement,  this  product  was  much  better  than  average;  3:  Average  showing  in  this 
category.  Product  was  neither  especially  good  nor  exceptionally  bad;  2:  Below  average.  Lacked  some  features  or  lower 
performance  than  other  products,  or  than  was  expected;  1:  Considerably  subpar,  or  lacking  features  being  reviewed 


Initially,  Inspector  baselines  typi¬ 
cal  network  activity  (which  takes 
about  30  minutes),  documenting 
what  is  “normal”  for  the  particular 
environment.  It  learns  and  adapts 
over  time  to  the  unique  patterns  of 
the  network  and  is  better  able  to 
separate  legitimate  increases  in  traf¬ 
fic  from  spoofed  traffic  with  mali¬ 
cious  intent. 

To  help  avoid  false  positives, 
Inspector  includes  user-defined 
thresholds  on  up  to  eight  aspects  of 
the  network  traffic,  including  proto¬ 
col  levels  and  traffic  flow,  to  trigger 
alerts  at  the  first  signs  of  possible  dis¬ 
tributed  DoS  attacks. 

During  testing,  we  launched  a 
variety  of  distributed  DoS  attacks, 
and  Inspector  successfully  identi¬ 
fied  each.  We  also  created  a  sudden 
increase  in  legitimate  network  traf¬ 
fic  to  see  if  the  Inspector  could  dif¬ 
ferentiate  between  legitimate  and 
attack  traffic,  which  it  did. The 
attack  information  and  characteriza¬ 
tion  displayed  in  the  Web-based 
reporting  were  accurate  and  infor¬ 
mative.  Based  on  our  lab  testing, 
Inspector  is  effective  at  analyzing 
network  traffic  and  determining 
when  distributed  DoS  attacks  are 
occurring. 

Administration  and  reporting 

Inspector  administration  is  per¬ 
formed  either  through  the  secure 
HTTP  Web  interface  or  directly  on 
the  console  through  Secure  Shell.  An 
embedded  firewall  developed  by 
Mazu  and  based  on  the  same  packet¬ 
processing  platform  used  for  the 
Inspector  distributed  DoS  analysis  on 
the  device  limits  access  to  these 
secure  protocols.  These  administra¬ 
tion  tools  provide  four  main  func¬ 
tions:  configuration,  attack  detection, 
attack  characterization  and  traffic 
analysis  monitoring. 

Configuration  settings  allow  you 
to  enable  SNMP  monitoring  and  set 
system  thresholds.  With  SNMP  en¬ 
abled,  an  alert  can  be  sent  via  your 
network  management  system 
(which  can  then  send  e-mails  or  a 
page)  when  a  distributed  DoS 
attack  is  identified. 

When  Inspector  determines  an 
attack  is  under  way,  it  alerts  the 
administrator,  either  through  SNMP 
or  a  message  on  the  Web  interface 
overview  page. Then,  it  enters  attack 
characterization  mode.  Attack  charac¬ 
terization  mode  provides  detailed 
information  and  analysis  of  a  possible 
distributed  DoS  attack.  Initial  infor¬ 
mation  is  seen  on  the  overview  page 
during  the  attack. 

The  attack  incident  report  page 
provides  detailed  information  on 
attack  histories  and  lets  you  drill 
down  to  specific  packet  details  for 
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each  suspected  attack. 

Inspector  lets  you  inspect  your  traf¬ 
fic  from  a  high  level  down  to  individ¬ 
ual  packet  contents.  You  can  view  a 
graph  of  all  traffic  and  eliminate  cer¬ 
tain  traffic  types,  such  as  all  User  Data¬ 
gram  Protocol  (UDP)  packets.You  can 


also  view  traffic  from  specific  IP 
addresses  and  time  ranges.  When 
under  attack,  this  interesting  view  lets 
you  see  the  differences  in  healthy  traf¬ 
fic  and  attack  traffic. The  online 
reports  are  excellent  and  provide 
detailed  information,  but  we  would 


like  to  see  some  printable  reports  to 
present  to  management  to  summarize 
attacks,  give  an  overview  of  what 
occurred  and  show  other  detail. 

Conclusion 

Inspector  is  an  effective  solution 


The  only  spin-free,  hands-on  analysis  available  today. 


Miercom's  Special  Report  provides  detailed  analyses 
and  lab-test  results  of  IP  PBXs  from  •Alcatel  *0500  •  Mitel 

•  NEC  •  Shoreline  •  Sphere  •Vertical  ...and  others. 

For  each  IP  PBX  you'll  find  comparative  performance 
results  on: 

•  Voice  Quality  (MOS  Ratings,  Interactive,  and  more) 

•  Call  completion  mte/reliability 
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platforms;  IP-enabled  vs.  IP-eentric;  Soft  phones; 

PBX  features;  Application  software  add-ons 
(Unified  Messaging;  Call-center  support);  IP  Phones 
and  in-line  powering;  Management  and  monitoring; 
IP-to-PSTN  trunk  fail-over;  Standards; 

VoIP  interoperability ...  and  lots  more. 
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QUARTERLY  UPDATES  AVAILABLE  THROUGH  2001.  The  leading  edge  in  networking  information 


to  identify  distributed  DoS  attacks  in 
large  carrier-class  networks.  Starting 
at  $100,000  for  only  monitoring  and 
attack  characterization,  it  is  not  a 
solution  for  the  faint  of  heart. 

Overall, TrafficMaster  Inspector 
provides  fast,  efficient  anomaly-based 
monitoring,  but  it  does  not  provide 
any  filtering  recommendations. To  do 
that,  administrators  must  create  their 
own  filters  based  on  the  attack  char¬ 
acterization  information  provided  by 
Inspector  or  purchase  Enforcer, 
which  will  implement  filters  in  real 
time  on  a  packet-by-packet  basis. 

Andress  is  president  of  ArcSec  Tech¬ 
nologies,  a  security  consultancy.  Her 
new  book,  Surviving  Security,  was 
recently  published.  She  can  be 
reached  at  mandy@arcsec.com. 


How  we  did  it 

We  set  up  a  Gigabit  Ethernet 
attack  network  with  two 
servers,  each  a  900-MEIz 
Pentium  III  with  128M  bytes  of 
RAM,  as  an  attacker  and  a  server. 
TrafficMaster  Inspector  sat  in  the 
middle  of  these  two  machines, 
monitoring  and  capturing  all  net¬ 
work  traffic. 

We  launched  a  variety  of  distrib¬ 
uted  denial-of-service  attacks 
using  various  tools  and  packet  gen¬ 
erators  available  at  the  Packet- 
storm  Web  site.  Attacks  included 
ping  floods,  ACK  attacks,  random 
ICMP  floods,  random  IP  floods  and 
TCP  reset  floods.  The  ping  flood 
attack  sent  a  large  number  of  Inter¬ 
net  Control  Messaging  Protocol 
(ICMP)  packets.  The  ACK  attack 
sent  a  large  number  of  TCP  packets 
with  the  ACK  flag  set.  The  random 
ICMP  floods  sent  a  large  number  of 
ICMP  packets  with  various  as¬ 
pects,  such  as  IP  address  and  time 
to  live,  randomized.  The  random  IP 
floods  sent  a  large  number  of  ran¬ 
domized  packets,  and  the  TCP  reset 
floods  sent  a  large  number  of  TCP 
packets  with  the  reset  flag  set. 
With  each  attack,  approximately 
50,000  to  60,000  packets  per  second 
were  sent  across  the  network. 

We  also  used  a  traffic  generator 
(Traffic  Source  available  at  http:// 
sourceforge.net/projects/traffic/) 
to  generate  several  hundred 
megabits  of  traffic  to  simulate  a 
sudden  increase  in  legitimate  traf¬ 
fic  to  see  if  Inspector  flagged  it  as 
suspicious.  This  traffic  included 
HTTP,  FTP,  SMTP  and  general 
broadcast  traffic. 
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Controlling  project  creep 


Workforce  management  software  helps  IT  track  costs,  projects  anti  staffing  requirements. 


BY  NICK  WREDEN 
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expenditures  for  plumbing  wholesaler  Fer¬ 
guson  Enterprises  in  Newport  News,Va.,  rep¬ 
resent  one  of  the  largest  budget  items,  and 
senior  executives  wanted  to  know  specifics 
about  how  the  $30  million  was  being  spent. 

At  the  same  time,  rapid  growth  had  overtaken  IT 
management’s  ability  to  answer  that  question. 
Resources  were  applied  across  numerous  projects, 
and  it  was  difficult  to  capture  a  complete  picture  of 
who  in  IT  was  doing  what  —  and  why. 

As  a  result,  Ferguson  turned  to  workforce  manage¬ 
ment  (WFM)  software. These  emerging  applications 
automate  human  capital  management.They  help 
assign  the  right  workers  to  projects,  improve  hiring 
and  outsourcing  decisions,  and  help  retain  workers 
through  skills  management  and  performance  review. 
Companies  are  also  using  WFM  as  a  planning  tool  to 
identify'  skills  gaps  and  get  workers  training.  “WFM 
takes  human  resource  capabilities  deeper.  It  involves 
looking  for  workers  inside  and  outside  the  company, 
managing  these  workers  as  they  grow,  and  under¬ 
standing  the  available  skills  so  that  you  can  have  pre¬ 
dictive  matching  on  future  projects,”  says  Andrew 
Goloboy,  a  research  manager  with  IDC.’It’s  a  kind  of 
i2  supply-chain  management  for  people.” 

Ferguson  began  installing  its  WFM  application 
about  a  year  ago. The  goal:  Better  communicate  to 
business  executives  the  activities  of  the  200-person 
IT  department  and  illustrate  resource  availability  for 
future  projects. 

“Although  everyone  was  working  hard  on  ERP 
evaluation,  legacy  upgrades  and  other  projects,  these 
projects  really  weren’t  well-monitored  and  lacked 
sufficient  coordination,”  say's  Mitch  Cummins,  an  IT 
manager  at  Ferguson.  “We  wanted  to  an  enter¬ 
prisewide  view  of  IT  activities,  both  for  executive 
and  IT  management.” 

Ferguson’s  $250,000  WFM  system  consists  of  Pri- 
mavera  TeamPlay,  a  Web  application  running  on  Win¬ 
dows  NT  that  accesses  an  Oracle  8.1  database. 

Ferguson  is  using  its  WFM  system  to  manage  a  six- 
month  network  infrastructural  upgrade  at  the  firm’s 
more  than  500  sites.  Since  much  of  the  site  survey, 
router  replacement  and  other  work  is  repetitive  at 
each  location, TeamPlay  can  automatically  manage 
scheduling,  costing  and  resource  management. 

Branch  managers  and  other  personnel  publish  the 
information  weekly  to  the  Web  for  access. “Instead  of 
tracking  routine  activities,  we  can  respond  more 
quickly  to  exceptions,  which  is  helping  us  keep  a 
complex  project  on  track,”  Cummins  says. 

While  some  companies  emphasize  project  track¬ 


Capital  management 


The  workforce  management  market  is  taking  off,  more  than  doubling 
over  a  four-year  span. 
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ing,  others  are  using  WFM  to  monitor 
current  and  future  skills  requirements. 

Avery  Cloud,  vice  president  and  CIO  at 
Integris  Health,  a  $1.1  billion  healthcare 
provider  in  Oklahoma  City,  Okla.,  had 
three  goals  for  the  WFM  system. 

First,  it  had  to  help  to  align  business 
goals  and  IT  capabilities.  It  also  had  to 
provide  skills  management  and  track¬ 
ing,  which  Integris  uses  in  conjunction 
with  training  to  minimize  outsourcing 
and  employee  turnover.  Finally,  the 
workforce  management  system  had  to 
improve  IT  project  management  and 
provide  more  accurate  costing. 

“WFM  helps  us  keep  the  ship  on  course,”  Cloud 
says. “Intelligent  WFM  improves  the  quality  and 
throughput  of  IT  projects  for  less  money.” 

Implementation  started  with  a  skills  inventory. 
Employees  not  only  listed  education  and  skills  training, 
but  also  hobbies  and  other  outside  activities.The  WFM 
application  helped  discover  that  one  employee  had 
been  an  artist,  making  that  person  ideally  qualified  for 
Web  site  design.  It  also  helped  target  an  outsourcing 
agreement  when  hospital  physicians  requested  a  Palm- 
based  application  that  displayed  current  patient  infor¬ 
mation.  Employees  had  the  necessary  Visual  Basic  and 
forms  experience,  so  all  that  was  needed  was  consult¬ 
ing  assistance  with  the  Palm  operating  system. 

Integris  chose  Changepoint  WFM  software,  which 
runs  on  Windows  NT  in  conjunction  with  a  SQL 
database. The  firm  spent  $150,000  on  the  software 
and  hardware.  What’s  more,  four  employees  spent 
about  70%  of  their  time  over  roughly  two  years  cus¬ 
tomizing  the  application,  entering  data  and  develop¬ 
ing  new  reports. The  most  requested  report?  Over¬ 
due  projects. 

Benefits  have  been  substantial.  For  Ferguson,  more 
projects  are  being  completed  on  time.  Staff  morale  is 
better  since  workloads  are  distributed  more  evenly. 
And  business  executives  are  getting  the  IT  resource 
allocation  information  they  demanded. 


www.nwfusion.com 


J  UST  MANAGING 

Project  management:  Ample  advice. 
Product  info:  Primevera  and  Changepoint. 
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Integris  now  has  an  IT  turnover  rate  of  less  than 
10%,  compared  with  a  typical  turnover  rate  of  about 
18%  in  other  not-for-profit  organizations.  Because  it 
costs  between  $60,000  to  $110,000  to  replace  an 
employee,  the  boost  in  retention  represents  substan¬ 
tial  savings.  IT  has  minimized  outsourcing  costs,  sim¬ 
plified  performance  reviews,  and  can  more  easily 
determine  employee  workload  and  on-time  output. 

IT  also  used  the  WFM  system  to  identify  about  five 
employees  who  are  vital  to  the  long-range  goals  of 
becoming  a  Web-centric,  PDA-based  organization. 
“We’re  constantly  sending  them  to  classes,  and  will 
make  them  as  happy  as  is  legal  to  protect  them  from 
outside  recruitment  or  defection,”  Cloud  says. 

Integris  had  to  educate  its  employees  about  the 
benefits  of  the  WFM  system  and  convince  them  to 
use  it. WFM  applications  typically  require  employees 
to  track  their  time  by  day  or  even  by  hour.  Resistance 
sometimes  occurs  from  employees  without  experi¬ 
ence  in  such  time-sheet  accountability.  Integris 
employees  also  raised  their  eyebrows  at  being  asked 
about  personal  activities  for  a  corporate  database. As 
a  result, “no  workforce  management  system  is  going 
to  work  well  unless  there  is  trust  between  employees 
and  management,”  Cloud  says. 

Although  Ferguson  extensively  briefed  IT  employ¬ 
ees  on  the  need  and  benefits  of  the  WFM  system, 
Cummins  now  says  more  could  have  been  done. 

Cloud  predicts  that  the  current  skills  crunch  will 
become  even  more  critical  over  the  next  five  years. 
“Without  a  workforce  management  system  in  place, 
companies  will  find  it  more  difficult  to  achieve  short¬ 
term  objectives  and,  more  important,  their  visionary 
goals,”  he  says. 


*  5724 


Wreden  is  a  freelance  writer  in  Atlanta.  He  can  be 
reached  at  nick@aspenl.com. 
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Remote 


Access  Yeur  Network  Equipment  From  Anywhere ! 

When  it  comes  to  Remote  Site  Management,  no  one  offers  more  choices  to  remotely  access  multiple  console  ports  and/or  reboot  power  than 
Western  Telematic.  Our  Remote  Management  Hardware  offers  the  design  flexibility  you  need  to  mix  and  match  equipment  for  small  or  large  scale 
remote  management  strategies.  As  the  pioneer  and  leader  in  Remote  Site  Management,  WTI  products  are  now  installed  in  thousands  of  network 
sites  world  wide.  Our  customers  know  they  can  depend  on  our  superior  quality,  reliability,  and  delivery  for  their  mission-critical  operations. 


Telnet  and  Dial-Up  Console/AUX  Port  Switch 

Cost  Effective  Terminal  Server  Alternative 


10Base-T  Ethernet  Interface 


19”  Rack  Mounted 


AC  or  48V  DC  Power 


NEBS  Approved 


RS232  Ports 


Console  Management  Switch  (CMS) 


•  8  or  1 6  RS232  DB-9  Serial  Ports 

•  Simultaneous  Telnet  Sessions 

•  Modem  Auto-Setup  Command 
Strings  (User  Definable) 

•  IP  Security  Features 

•  Non-Connect  Port  Buffering 


REMOTE  ADMINKITWCR 


Telnet  and  Dial-Up  AC  Power  Switch 

Economical 


15  Amp  Power  Circuit 


lOBase-T  Ethernet  Interface 


Individually  Controllable 
Outlet  Plugs  (2)  Modem  Port  for 

Out-of-Band  Management 


Local  RS232  Console  Port 


Telnet  Power  Switch  (TPS) 

•  2  Individual  Outlets  •  Network  Security  Features 

•  On/Off/Reboot  Switching  •  Manual  On/Off  Buttons 

•  Outlet-Specific  Password  Security  •  Switches  1 5-Amp  Load 


Telnet  and  Dial-Up  Network  Power  Switch 

Reboot  Locked-up  Equipment 


Individually  Controlled 
Outlet  Plugs  (8) 


lOBase-T  Ethernet  Interface 


19”  Rack  Brackets 
Allow  Front,  Back, 
or  Center  Mounting 


Dual  15  Amp 
Power  Circuits 


Modem  Port  for 
Out-of-Band  Management  Local  RS232  Console  Port 

Network  Power  Switch  (NPS) 


•  8  Individual  Outlets 

•  On/Off/Reboot  Switching 

•  Integral  lOBase-T  Interface 

•  Co-Location  Features 


•  Outlet-Specific  Password  Security 

•  Network  Security  Features 
11 5-VAC  (230-VAC  available) 
Power-Up  Sequencing 


Secure  Modem  for  Remote  Dial-Up  Management 

Dial-up  Access  to  Equipment  Bays 


Local  RS232  Console  Port 


NEBS  Approved 


AC  or  -48V  DC  Power 


Modem  Port 


33.6  Kbps  Modem 


Secure  Rack  Modem  (SRM) 

•  Up  to  100  Individual  Passwords 

•  Audit  Trail  Log  With  Time/Date  Stamp 

•  Powers  up  to  Specified  Answer  Rings  and  Baud  Rate 

•  Remotely  Configurable 

•  AC  and  -48V  DC  Power  Options 

•  Standard  “AT”  33.6  Kbps  Modem 


Visit  Our  Website  For  The  Complete  NetReach™  Product  Line 

www.wti.comi 


See  Us  at  Netwoiid+lnterop  Atlanta  2001,  Booth  8123 


(800)  854-7226 
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western  telematic  incorporated 

5  Sterling  •  Irvine  •  California  •  92618-2517 


Keeping  the  Net...Worksng ! 


"■mmm 


High  Performance  LAN/WAN  Troubleshooting 
&  Protocol  Analysis  Software  Solutions 


Observer— Removes  the  Mystery  of  What  is 
Being  Sent  or  Received  by  LAN  Stations 

Observer  identifies  network  trouble  spots  and  costs 
thousands  less  than  expensive  hardware-based 
analyzers.  If  you  have  any  network  problems,  find 
out  the  cause  with  Observer,  Expert  Observer  or 
Observer  Suite. 

•  Full  packet  capture  and  decode  for  over 
1000  protocols,  including  TCP/IP  (v4  and  v6), 
NetBIOS/NetBEUI,  IPX/SPX,  Appletalk, 

SNA  and  DECnet 

•  Switched  mode  sees  all  ports  on  a  switch 
gathering  statistics  from  an  entire  switch  or 
packet  capture  from  any  port(s) 

•  Long-term  network  trending  collects  statistical 
data  for  days,  weeks,  months,  even  years 

•  Optimized  ErrorTrack  NDIS  drivers  display 
true  errors-by-stations 

•  Real-Time  Statistics  include  Top  Talkers, 
Bandwidth,  Protocol  Statistics, 

Efficiency  History 


EXPERT  OBSERVER® 
OBSERVER®  OBSERVER®  SURE 


•  Additional  probes  are  $295  per  local  or  remote 
segment/site/switch 

•  Ethernet  (10/100/1000),  Token  Ring,  FDDI 

Expert  Observer — Identifies  Problems  and 
Provides  Expert  Information  in  Plain  English 

Expert  Observer  includes  all  of  the  features  of 
Observer  plus  real-time  and  post-capture  expert 
event  identification,  expert  analysis,  VoIP  expert 
and  modeling  of  network  traffic  data. 

Observer  Suite — The  Ultimate  Tool  For  The 
Most  Demanding  Power  User 

Observer  Suite  provides  a  full  complement  of  tools 
that  includes  all  of  the  features  of  Expert  Observer 
plus  SNMP  management,  RMON  console/Probe 
and  Web  reporting.  Includes  one  remote  Probe. 


©2000  Network  Instruments, 
Network  Instruments  end 
are  registered  tra 
Instruments.  LLC. 


Call  800-526-7919  or  visit  us  online  for  a  full-featured  evaluation: 

www.networkinstruments.com 

US  &  Canada  (952)  932-9899  •  Fax  (952)  932-9545  •  UK  &  Europe  +44  (0)  1959  569880  •  Fax  +44  (0)  1959  569881 


•  Reboot  via  Built-in  modem,  LAN/WAN 
and  wireless  connections 

•  Lower  costs  through  reduced  network 
downtime  and  field  service  visits 

•  SMART start  and  SHARPstart  PDU’s  offer 
customization  and  are  upgradable 

•  Menu-driven  user  friendly  interface  and 
secure  password  protection 

•  Global  access  to  monitor,  program, 
reboot  and  sequence  outlets 


To  leant  more  call  814-835-1650 
or  for  instant  online  information, 
go  to  \*svH.spectrumcontrol.com 

and  enter  Spectink  UH2230  - 


SPECTRUM  CONTROL  INC. 

Power  Technologies  Group 

www.spectrumcontrot.com 
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FatPipe  it! 


WITH  MULTI-PATH  VPN 


CORPORATE  OFFICE 


FATPIPE  MPVPN 


Multi-Path  VPN  takes  any  VPN  &  makes  it  9  times  more  secure 
and  3  times  faster,  reliable  and  redundant 


■"Patented  and  Multiple  Patents  Pending 


TKthipe 

FatPipe  Networks 
www.fatpipeinc.com 
lnfo@fatpipeinc.com 
Tel:8oo. 724. 8521 
Fax:  801.281.0317 


FILE  SERVERS 


ANY  VPN 


FatPipe  Networks'  Multi-Path  VPN  (MPVPN) 
turns  any  VPN  into  a  Multi-Path  VPN 

•  No  BGP  programming  or  new  hardware  at  the  ISP 

•  Dynamic  bi-directional  load  balancing  of  traffic 

•  3  times  more  speed,  reliability,  and  redundancy 

•  Works  with  Ti,  T3,  Ei,  E3,  DSL,  and  Wireless 

•  Works  over  multiple  ISPs  and  backbones 

•  Reliability  for  hosting  web  servers 

•  Works  with  all  IPSEC  VPNs 

•  Flost  multi-homed  servers 

•  9  times  more  secure 


FATPIPE  MPVPN 


Come  see  us  a 
Networld+lnterop  - 
Atlanta ,  Booth  #  1830 


BRANCH 


ANY  VPN 
FILE  SERVERS 
OFFICE 


ISPl,  2,  &3 


ISP  1,  2,  &  3 


CERTIFIED 


[  Firewall  ) 


Global  Technology  Associates,  Inc. 

Sales:  800-775-4GTA  •  Tel:  407-380-0220 
gb-info@gta.com  •  www.gnatbox.com 


At  $995.00  with  an  unlimited 
user  license  GNAT  Box  Firewall 
isn’t  cheap.. .it’s  cost  effective. 

Features  Include: 

•  Proven  Firewall  Technology 

•  Dynamic  Network  Address  Translation 

•  Unlimited  User  License 

•  High  Performance 

•  Easy  to  Configure  and  Operate 

•  Remote  Web  Base  Management 

•  Time  Based  Access  Control 

•  Email,  Pager  &  SNMP  Trap  Alerts 

•  Email  Proxy  with  Anti-Spam  Features 

•  Win95/NT  Secure  Remote  Management 

•  URL  and  Content  Filtering 

•  Supports  Gigabit  Ethernet,  FDDI,  TokenRing 
10/100  Ethernet,  DSL,  Cable  Modem  &  PPP 

•  IPSec  VPN 

•  Built-in  DHCP  Server 

•  Built-in  DNS  Server 

•  ICSA  Certified 


Now 

Available  in  the 
GB  Family  of 
Firewall 
Appliances 


COj'J'/J liOL  J\T 
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Rose  Electronics  KVM  switches 
or  multiple  workstations  to  have  local  or 
access  to  multiple  computers  located  in 
rooms  or  on  the  desktop. 

Rose  is  a  leading  KVM  switch 
with  the  most  complete  range 
management  products.  A  KVM  i 
Rose  is  known  for  its  technically 
price  competitive  products. 

From  simple  access  to  complex  configurations,  P 
Rose  provides  easy  server  management 
solutions. 


Call  ROSE  today. 


m 


ELECTRONICS 

ROSE.COM 


.  CANADA  .  ENGLAND  .  GERMANY  .  BENELUX  .  AUSTRALIA 


Rose  Electronics 

10707  Stancliff  Rd.  Houston,  Texas  77099 

800-333-9343  281 


-933 


Server  Management 

Starts  Here...  1 
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An  Important  Part  Of  The  Network 


Whats  T  Taps, 
New?  |  Splitters 


Fiberoptic  ,  _ 
Attenuators  Converters 


Cable  ]  Bypass 
Assemblies  Switch 


Simulation 
Test  Box 


LAN 

Equipment 


Test 

Equipment 


into 

TWORK 


GigaBit  Fault  Tolerant-Redundant  Security  Port  Selector 

Net  Optics'  Fiber  GigaBit  Fault  Tolerant  Port  Selector 
detects  fault  line  automatically  to  prevent 
your  network  traffic  from  stopping. 

This  product  is  a  MUST  for  ISP  centers, 
and  central  offices  with  critical  ry 

data.  Works  well  with  all  GigaBit  IjCCUFC 
Servers,  Switches  brand  names.  . .  .  _____  _ 

Network  Redundancy!  y°urNETWORK 


visit:  www.netoptics.com/net-96260.html 


GigaBit  Copper  to  SX,  LX  or  ZX  Fiber  Converters 

Net  Optics'  Gigabit  Copper  to  Fiber  Converter  allows 
network  managers  to  migrate  to  GigaBit  Ethernet 
in  a  cost-effective  manner. 

Simply  plug-in  the  Cables. 


visit:  www.netoptics.com/sx-tx-converter.html 


GigaBit  ZX,  LX  to  SX  Media  Converter 

Net  Optics'  Fiber  Optic  Mode  Converter  is  used  to 
connect  two  devices  operating  with  GigaBit  multimode 
LX  fiber  to  SX  fiber. 

The  fiber  converter 
provides  transparent 
conversion  of  optical 
signals. 


'-+•  visit:  www.netoptics.com/converter-gig.html 


Fiberoptics  Cable  Assemblies 

The  Net  Optics'  total  solutions  approach  can  provide  you 
with  any  type  of  fiberoptic  cable  assembly  you  need, 
from  LC,  MTRJ,  SC,  MIC,  FC  or  Escon  patch  cords  for 
your  ATM,  Gigabit  and  any  other  network. 

Also  available: 

LC,  SC,  MT-RJ  fiberoptic  Loopbacks. 
visit:  www.netoptics. com/2. html 


Network  Monitoring  Accessories 

In  some  countries  ISP's  mustbeTAPable...  is  the  new  Law! 


GigaBit  SX,  LX  or  ZX,  ATM,  DS3,  T1,  Copper  and  Fiber  Taps 
These  Splitter  Taps  have  capabilities  that  will  allow  the 
networks  to  operate  at  a  continuous  flow  while  the  tap  is 
non-operational,  thus  maintaining  network  integrity.  This 
enables  you  to  monitor  the  network  without  disconnecting 
any  one  link! 

The  Fiber  Splitter  Tap  has  passive-link  integrity  that  is 
maintained  whether  the  device  is  on  or  off. 

Copper  Gigabit  to  Fiber  Taps  feature  two  Power 
Supplies  which  are  load  sharing.  If  either  unit  fails, 
the  remaining  power  supply  comes  up  to  full  power 
and  takes  over  the  additional  load. 

Compatible  with  all  analyzer  manufacturers  including: 

Network  Associates'  Sniffer®,  Agilent's  Internet  Advisor  and 
Cisco's  SwitchProbe  products. 

'-*•  visit:  www.netoptics.com/11.html 

Net  Optics’  GigaBit  TX  to  SX  Tap  is  the  market's  first 
copper  to  fiber  tap! 


GigaBit  Fiber  Tap 


Copper  to  FX,  SX,  LX,  ZX  Tap 


Copper  100BaseT  Tap 


6  Station  Tap 


Troubleshoot 

NETWORK 

_  Problems 


Tap  Diagnostic 


UmlOptics 

www.netoptics.com 


Bright  idects...  Built  for  speed/ 

Note:  Sniffer®  is  a  registered  trademark  of  Network  Associates  Inc. 


Net  Optics,  Inc.  •  1230-AOId  Mountain  View-Alviso  Road  •  Sunnyvale,  CA  94089-2237  •  USA  Tel:  +1  (408)737-7777  •  Fax:  +1(408)745-7719  •  world@netoptics.com 


YOUR  CUSTOMER 
ALREADY  KNOWS 


AND  THEY’RE  ON  THE  PHONE 
TO  YOUR  CEO  RIGHT  NOW 

WHO’S  GOING  TO  GET  THE  NEXT  CALL? 

When  a  service  failure  occurs,  the  last  people  you  want  to  find  out  are 
often  the  first  to  know.  And  by  the  time  your  technology  staff  can  react, 
the  service  failure  has  escalated  to  a  much  higher  level  -  a  painful  one. 

With  Silas  Reveille'",  the  people  who  can  resolve  the  failure  find  out  first. 
Silas  Reveille  detects  component  and  application  failures  as  soon  as  they 
occur,  and  immediately  alerts  the  proper  staff  with  meaningful  diagnostic 
information.  Unlike  conventional  enterprise  management,  Silas  Reveille 
delivers  within  days  a  single  view  of  the  health  of  your  critical  technology 
infrastructure  -  without  software  agents. 

You  see  what's  happening  across  all  the  diverse  platforms  and  applications 
that  run  your  company,  the  ones  your  customers  depend  on. 

In  the  real  world,  this  makes  all  the  difference. 


SEE  HOW  SILAS  REVEILLE™  CAN  SAVE  YOU 
FROM  BEING  THE  LAST  TO  KNOW 


(s&Cables 

••••••••••• 


com 


or  coll  1  -800-555-71 76 

„  ,  Patch  i  Phone  ,  Fiber  . 

Custom  1  Cofds  cords  Optics 


Buy  Direct 


IIPD4H. 

uun^"B  v 

UNIVERSAL  SERIAL  BUS  \ 


3  ft.  Custom  / 

CAT  5 

.  ONIY 

$1.26 


A/B.IM  f 

ONLY  - 
$1.19*e< 


9  Colore  T£| 

Block,  Blue, 

Gray,  Green,  Orange, 

Purple,  Red,  Yellow,  White 

Save 
up  to 
35%off 
Unit  Price  with 
Volume  Discounts 


Custom  &  Standard  Cables 

Guaranteed  for  3  Years  -  Guaranteed  Satisfaction  -  Guaranteed  Lowest  Prices 

'Prices  based  on  maximum  volume  discount  purchases.  ©  2000  GoCables  is  a  registered  trade  nome  and  trademark  of  Global  Manufacturing  Solutions*  LLC 
All  other  trade  names  and  trademarks  are  the  property  of  fbar  respective  owners.  As  viev^d  in  Microsoft  IE rM  browser 


Direct  Response  Advertising 

Sales  Territory  Map 


Cara  Peters,  Account  Manager,  California  &  Hawaii 
Tel:  800.622.1108  ext.  6505  Email:  cpeters@nww.com 


Karima  Zannotti,  Sr.  Account  Manager,  Central  US/Pacific  Northwest 
Tel:  800.622.1108  ext.  6469  Email:  kzannotti@nww.com 


Richard  Black,  Director,  New  England,  PA,  NY,  NJ 
Tel:  800.622.1108  ext.  6596  Email:  rblack@nww.com 


Amie  Gaston,  Account  Executive,  Mid-Atlantic/Southeast/Canada 
Tel:  800.622.1108  ext.6408  Email:  agaston@nww.com 


Enku  Gubaie,  Sr.  Account  Manager/Special  Projects  Leader 
Tel:  800.622.1108  ext.  6465  Email:  egubaie@nww.com 
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IP 


^Raritan 

www.raritan.com 


800-724-8090 


Raritan  and  Paragon  are  registered 
trademarks  of  Raritan  Computer,  Inc. 


2  Under  Par. 

Life  is  good..  .  with  Paragon,  the  highly 
acclaimed,  multi-user,  multi-platform  KVM  switch 
that  uses  Raritan's  advanced  Cat5  transmission 
technology  for  access  to  hundreds,  even  thousands 
of  servers  up  to  1 ,000  feet  away.  What  could  be 
better? 

Paragon0  +  TeleReach ™  Enterprise-class  KVM 
technology,  plus  the  fastest,  most  reliable  and  secure 
way  to  gain  remote,  IP  access  to  multiple  servers  — 
no  matter  where  you  are,  or  where  your  servers  are 
located.  Manage  your  servers  from  anywhere  via  the 
Internet,  LAN/WAN  or  dial-up  modem.  Maintain, 
administer  and  troubleshoot,  even  down  to  BIOS-level. 
And  Raritan's  unique  Video  Compression  Algorithm 
and  industry-standard  1 28  bit  SSL  encryption  ensure 
speedy  and  secure  data  transfer,  even  over  modem 
or  slow  Internet  connection. 


Paragon  +  TeleReach  Winner  of  Network 
Computing's  prestigious  Editor's  Choice.  The 
complete,  hassle-free,  server  management  solution. 

Anywhere.  Anytime. 


Paragon* 

l(Vlt  -Access  Oner 


Ci?SS  $?* T5ii 


Buy  Lease  Premier  Res* 


[doth! PRODUCTS] 


www.wdpi.cdnf 

Email:  cisco5  @ wdpi.com 


istributed  Server  Management 


-J^Access,  control,  operate  and  manage 
your  entire  network  (servers,  hubs,  routers, 
dumb  terminals)  from  any  number  of 
consoles,  ,.  ,,,  comfortably  located  on 
your  network  t  administrators’ 

desks,  and 
offices  over * 

A sk  us  about  Key-View  and  XP4000,  and 
join  other  Fortune  500  IT  managers  currently 
implementing  the  most  advanced  integrated 
network  management  solutions.  It 
will  make  you 

shine! 

.•  .  ... 


'  gJt  M  I  T 

even  'n  re  mote 
/the  Internet. 


80Q. 6  36. 3  434 


Si! 


...finally! 


□ 

wireless 


LAN  connectivity. 


colubrisnetworks.com 


Contact  Information:  440  Armand-Frappier,  suite  200,  Laval  (Quebec)  Canada  H7V  4B4  •  Phone:  +1  450  680-1661  •  Fax:  +1  450  680-1910 
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Television  On  Your  Network! 


EthemeTV2 

Television  Kit  f°r  Networks  , 


Security 


Increase  Surveillance 


Inform  Employees 


Train  Remotely 


EtherneTV2  ™  is  a  cost  effective 
package  that  connects  any  video  source  (i.e. 
Camera,  VCR,  DVD,  etc.)  to  your  network  and 
streams  DVD  quality  video  to  an  unlimited 
number  of  PCs.  We  offer  the  lowest  price  per 
seat  in  the  industry  with  high  quality  full 
motion  MPEG-2  video. 


ToU  Free:  l-(866)  VBRICK 1  (1-866-827-4251) 

GSA  Contract  #  GS-35F-0530L 

Visit  our  web  site  today  at  www.vbrick.com 


12  Beaumont  Road 
Wallingford,  Connecticut  06492  USA 


/.  buy  uptime,  com 


BuyUptime.com 

Your  One  Stop  Shop  for  high  availability  products 


High  Availability  Made  Easy 


Cisco  and  Fiber 
.Cabling 

Printer,  Modem  VGA 


By  understanding  the  ever-changing  dynamics 
of  information  technology,  BuyUptime.com  is 
dedicated  to  providing  the  highest  quality  data 
protection  and  security  products  on  the  market 


[Cable  Solutions 

Cable  and  connectivity 
solutions  for  laptop, 
desktop  and  server 
applications 

□  Customer  and  standard  cable  assemblies 
including  Fiber  Optic,  Category  5,  Video, 
Fibre  Channel,  SCSI,  LAN  Parallel  and  Serial 


( Telephony  Solutions 

Uninterrupted  powering 
solutions  for  cable 
telephony,  FTTH, 

VoDSL  and  WLL 

□  Supplies  continuous  power  (-48VDC  or 
12VDCI  to  locally  power  CPE  equipment 

□  Provides  up  to  14  hours  of  battery  backup 


today.  Our  goal  is  to  deliver  comprehensive 
solutions  to  protect  your  most  valuable  network 
assets  while  also  providing  peace  of  mind. 


□  USB  and  IEEE-1394  FireWire  Solutions 
including  cables,  hubs,  converters  and 
switches 


□  Features  intelligent  communication  for 
proactive  monitoring  and  maintenance 
information  (on-line/on  battery,  missing 
battery,  replace  battery) 


At  BuyUptime,  we  stand  behind  the  products 
we  sell  with  customer  service  unparalleled  to 
that  of  any  other  on-line  resource.  Join  us 
today,  and  let  BuyUptime.com  be  your  one- 
stop  shop  for  high  availability  solutions! 


Register  to  receive  one  of  25 
APC  Travel  Power  Inverters! 


[Server  Protection 

Performance  power 
protection  for  servers 
and  networks 

□  Protects  your  data  by 
supplying  network-grade  battery  back-up 

□  Robust  diagnostics  allow  network 
administrators  to  solve  problems  before 
they  happen 

□  Increases  emergency  runtime  by  allowing 
expansion 

starting  $229 


,  Power  Distribution 


For  mission-critical 
networking  and 
internetworking 
equipment 


□  Thorough  selection  of  power  strips,  back- 
plates  and  remote  reboot  devices 

□  Manage  via  Web,  SNMP  or  Telnet  session 

□  Advanced  power  control  units  allow 
load-shedding  to  increase  system  uptime 

□  15A,  20A,  30A  loads 


http://www.buyuptime.com/promo  Key  Code  a860y  CALL:  888-288-8843  •  FAX:  877-411-2080 


©2001  Systems  Enhancement  Corp.  All  Trademarks  are  the  property  of  their  owners.  Call:  888-288-8843  •  Fax:(877)411-2080  •  E-mail:  customerservice@buYuptime.com 
801  Corporate  Centre  Drive,  St.  Charles,  MO  63304  •  BY2A1 EP-US 
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How  do  you  reboot  l6 


using  Zero  U 

of  rack  space? 


1R  Sentry  POWER  TOWER :  Your  Zero  U  Reboot  Solution 


Another  great  product  from 

Server  Technology,  Incr^fL 


of  S«vw  Technology,  Ino. 


install  the  new  Sentry  Power  Tower  in 
your  data  center,  NOC  or  co-lo  facility 
:  and  gain  the  advantage  of  remotely 
-•  rebooting  up  to  t6  of  your  equipment 
units  -  without  occupying  any  space  in 
your  rack  or  enclosed  cabinet 

Try  the  New  Sentry  Power  Tower  in  your 
rack  or  cabinet  and  realize  the  benefits 
of  Intelligent  Power  Distribution  and 
-  Remote  Power  Management 


See  our  complete  product  Bne  at  wwwservertedi.com 
or  call  800.835.1515  or  775J84.2000 


16  remotely  addressable  power  outlets  — 
The  highest  density  available  of  any 
Remote  Power  Management  vertical  strip. 
30-amp  power  input  feed  distributed 
across  16  outlets. 

Mounts  vertically  in  your  equipment  rack  or 
cabinet  and  requires  Zero  U  of  rack  space. 
Load  Sense  provides  real-time  current 
monitoring  in  the  remote  screen  Interface 
and  through  a  built-in  LED  display  for  on¬ 
site  measurement. 

Power-up  sequencing  of  all  16  outlets 
prevents  an  ln-rush  current  overload. 
Telnet,  SNMP,  Modem  or  RS-232  interfaces  for  easy, 
practical  and  secure  power  management  of  remote 
Internetworking  equipment. 


fmsiNEi 


Remote  Reboot  Via: 

•  RS232:  Direct  &  Dial-Up 

•  Ethernet  &  TCP/IP 

•Strap  Up  To  10  IPCs 
To  Control  80  Outlets 

See  Us  At 

NETWPRLD 

+INTEROP 

2001  Atlanta 


Exclusive  Features: 

•Sequence  power  up/down 

•  Local  control  of  each  outlet 

•  20A/85-264V-  input 
•IEC60950  Cl  3  Outlet 

Version  Available 

•  Branch  circuit  protection 
•16  gouge  steel  construction 

•  Cross  platform  compatible 

•  Remote  access  disable 


PULIZZI * 

ENGINEERING  INC. 

3200  S.  Susan  St.,  Santa  Ana,  CA  92704-6865 

www.pulizzi.<om/ip<  E-mail:  sales@pulizzi.<om 

fall  Today!  I  -Cl  77-PULIZZI  (785-4994} 


Find  the  Product  and  Services  that  you  are  looking 

for  on  Network  World  Fusion's  Product  Showcase. 

go  to:  www.nwfusion.com 


click  on: 


N0RTEL  NETWORKS 


a  mm 


Why  Are  We  The  Best? 

Nortel  Service  Contracts  •  Next-Day  Hardware  • 

Nortel  Service  Renewals  Replacement 

Free  Technical  Support  *  Competitive  Prices 

Good  As  New  Gear, 

Same  as  New  Warranty 
-  at  Better  Than  New  Prices 

Refurbished  Specials: 

BayStack  450-24T  (AL2012E14)  with  MDA  Port 

10/100/1000  BT  Autosense  Switch 

Limited  Lifetime  Warranty 

Special  $995 

List  $2,695 

BLN-2  Router  Base  Unit  (71000)  -  Complete 

Indudes  Dual  AC  Power  Supplies  and  SRML 

Special  $1,999 

List  $12,700 

BCN  Router  Base  Unit  (73000)  -  Complete 

Indudes  Dual  AC  Power  Supplies  and  SRML 

Special  $2,999 

List  $18,150 

ARN  8  MB  Ethernet  Router  Base  Unit  (CV1001003) 

Other  Memory  Config  and  modules  avalible.  Call  now  for  pricing. 

Special  $295 

List  $1,134 

Dont  want  used?  Try  our  low  prices  on  new!  Call  Today! 


Call  for  Free  Quote! 


T.'t'k'bnun 


888-8LANWAN 

(888-852-6926)  —  B*i 


* 


National  LAN  Exchange  •  WWW.nle.com 


For  more  inforrna 
advertising  in  the  Ma 


g,  and  call  now! 


'pjf  View  Cart  '®isr  Clear  Cart 


/Ifiberdyne  labs 

Fiber  Optic  .  1 

Networking  Products 


FACTORY  DIRECT 
FIBER  OPTIC  PRODUCTS 


Jumpers,  Pigtails,  Termination  Boxes, 
Preconnectorized  Backbone  Cable, 
Mode  Conditioning  Cables, 
Ethernet  Converters  and  Switches, 
CAT5  Products,  Photonic  Devices 

www.fiberdyne.com 

/\  FIBERDYNE  LABS,  INC. 

l-(800)  894-9694 
(315)  895-8470 
Fax  (315)  895-8436 


NetwoikWorld  ni™er©p 


Don’t  miss  the  September  10  issue  of 
Network  World  with  bonus  distribution 
at  MetWorld+Interop  in  Atlanta! 

Issue  Close:  August  29 

Call  Enku  Gubaie 
1-800-622-1108  ext.  6465 


We  BUY/SELL  New  &  Used  LAN/WAN 
Connectivity  Products 


Specializing  in  CISCO 


SS  TOP  DOLLAR  PAID  SS 


T3  Systems,  Inc. 

500  Cirby  Way,  Suite  D 
Roseville,  CA  95678 

f 916 1  784-3000 

fax:  (916)  797-7284 

www.T3Systemsinc.com 


Authorized 
Cisco  Reseller 
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Cable  University 

(800)  537-8254 
www.CableU.net 

FREE  online  training  in  network 
cabling  installation  &  maintenance! 

NetworkTraining.com 

(800)  NET-SKIL 
(800)  638-7545 

Network  Analysis  &  Tool  Training  j 
Certified  NetAnalyst  Testing 


BNETSYS  Inc. 

(800)  BNETSYS 
www.bnetsys.com 
Instructor  led  &  online  Cisco 
certification  training  @  no  charge  I 

To  Place  Your 
Listing  Here 
Call  Enku  Gubaie 
at  1-800-622-1108 


Contact  these  companies 
today  to  help  you  with  your 
training  needs! 


Systems/Features/Memory 


Also  Available:  wellfleet,  Bay,  Fore, 
Xylogics,  Livingston,  &  Ascend 

in  Stock  •  Fast  Delivery  •  No  Expedite  Charges 


COMSTAR,  INC. 

The  Hi  Network  Remarketer 

612*835*5502 

Fax  612‘855»1927  E-Mail:sales®comstarinc.com 


We  BUY  and  SELL  New  and  Used  Network  Hardware 


Mm 

New  and  Refurbished: 

Corebuilder 

Pathbuilder 

Accessbuilder 

Lanplex 

Super  Stack 

CS2XXX 

Netbuilder  2 

Office  Connect 

NICs 

Chipcom 

Linkbuilder 

We  also 
Specialize  in: 

Cisco  Systems 


Lowest  Prices 

*  Up  to  90%  Off  List 

*  Lifetime  Warranties 

*  Same  Day  Shipping 

*  We  Ship  Worldwide 


•  Technical  Support 

*  Service  Contracts 


4LANWAN.com 


NORTEL 

NETWORKS 


caBLeTRon 

_ SYSiems 


USR 

Proteon 

Chipcom 


Call  Toll  Free:  1-877-4-LAN-WAN  (1-877-452-6926) 


Email:  sales@4lanwan.com 
Fax  516-293-5325 
Int’l  number  001-1-516-293-5200 


A  division  of  Ergonomic  Enterprises  Inc. 
47  Werman  Court,  Plainview,  NY  11803 


Established  1983 


For  more  information  on  advertising  in  Network  World's  Marketplace  contact: 
Enku  Gubaie,  800-622-1108  ext.  6465,  egubaie@nww.com 


Save  big  on  new/used:  >  Routers 
>  Access  Servers  >-  Optical  Networking  >  Wireless 


>  CISCO  ►  Juniper  >- Lucent  ► 

ywww.digitalwarehouse.com  > 

DIGITAL  WAREHOUSE 

Your  Information  Superhighway  Discount  Sources 


>  Gigabit/FE/ATM  Switches 

BUY/SELL/RENT 

Nortel  >.  Marconi 

Foundry  >-  Adtran 

Extreme  ►  Quick  Eagle 


Netfast  Communications  Inc.,  56-29  56<h  Drive,  Maspeth,  NY  1 1378  USA 
Phone:  1-888-892-4726  or  718-894-7500  Fax:718-894-1573 


Network  World  -  5/2001 


— 

Buy,  3ell  oh  Anno  unci 

Network  Products  and  Services  with  Network  World's 
Marketplace.  Call  800-622-1108  ext.  6507 


Solve  Your  Network 
Sync  Problems 
with  Wireless  CDMA 


NTP  Time  Server 

•  High  Performance 

•  Low  Cost 

•  Easiest  Installation  — 

No  antenna  hassle! 

EndRun 

TECHNOLOGIES 

www.endruntechnologies.com 

1-877-749-3878 


Monitor 
PC  Users 

See  multiple 
computer  screens  in 
real  time  with  the 
award-winning 
NetOp  Remote 
Control. 

Try  it  free 


www.CrossTecCorp.com 


We 

Buy 


& 


-Since  1935 


Sell 


CISCO 


•NETWORK  HARDWARG  RESALE 


FIBER  OPTIC 
SOLUTIONS 


•  T1/E1  &  T3/E3  Modems 

•  RS-232/422/485  Modems  and 
Multiplexers 

•  IBM  3270  Coax,  AS/400  Twinax,  and 
RS/6000  Modems  and  Multiplexers 

•  LAN  -  Arcnet/Ethernet/Token  Ring 

•  Video/Audio/Hubs/Repeaters 

•  ISO  -  9001 


0.1. 


Toll  Free  866-SITech-1 
630-761-3640,  fax  630-761-3644 

www.sitech-bitdriver.com 


Get  More  for  Today's  Budget! 


Contact  BIZI 
to  SAVE  up  to  80% 


!*■***£!  :SS£ 


•  50-80%  Savings  off  Retail  List  Prices 

•  120-Day  Warranty 

•  100%  30  Day-Money  Back  Guarantee 

•  Large  Inventory,  Same  day  Shipping 

•  Supplying  Quality  Networking  Products 
for  Over  10  Years  with  In-House  Technical  Support 

Request  a  Quote  on-line  at: 

http://www.bizint.com  or  info@bizint.com 

(877)  438-2494 

or  (315)  458-9606  fax:  (315)  458-9493 
We  Buy,  Sell,  Trade  and  Lease... 


Your  global  partners  In  new  &  quality 
pre-owned  networking  equipment 


CISCO,  BAY/NORTEL,  3COM,  CABLETRON,  EXTREME,  FORE/MARCONI 
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careers.com 


IT  CAREERS 


0  careers 


m 


Quality  Assurance  Engineer 

Assist  the  product  team  in 
software  development  by  devel¬ 
oping  &  executing  test  plans, 
analyzing,  reporting  &  tracking 
defects.  Must  have  B.S.  degree 
in  Computer  Information  Systems, 
Industrial  Engineering  or  related. 
M.S.  in  CIS  is  acceptable  in  lieu 
of  B.S.  Must  have  1  yr.  experi¬ 
ence  in  above  position,  or  as 
Software  Engineer  or  related 
with  ability  to  use  OOD,  C/C++, 
JAVA,  RDBMS  (Informix,  Oracle), 
NT,  and  W2K. 

40.0  hr/wk.  8:00-5:00 

Send  resume  to: 

Irene  Aggrey 

Quality  Assurance  Manager 
Byers  Engineering  Company 
6285  Barfield  Road 
Atlanta,  GA  30328-4303 


SENIOR  SOFTWARE  ENGI¬ 
NEER  to  design  and  develop 
business  systems  using  ERP 
client/server  applications  Peo- 
pleSoft  and  Oracle  for  multiple 
databases  Oracle,  DB2  and  SQL 
Server;  provide  system  solutions, 
analyze  user  needs  and  support 
client  production  environment  on 
various  operating  systems  Win¬ 
dows  NT,  MVS  and  UNIX;  design, 
coding  and  implementation  of 
conversion  programs,  interfaces 
and  reports  for  financial  or  human 
resource  applications  using 
PeopleTools,  PeopleCode,  Query 
Tool,  Import  Manager,  Data  Mover, 
SQL/SQR,  PL/SQL,  Forms, 
Report  Writer,  Crystal  Report 
Writer,  JCL,  Java  and  C/C++. 
Require:  Masters  in  Computer 
Science  and  three  years  experi¬ 
ence  in  the  job  offered  or  as 
Software  Engineer.  Bachelor  in 
Computer  Science  with  5  years 
experience  may  be  substituted 
for  Master  and  3  years  experience. 
40%  travel  to  client  sites  within 
the  United  States.  Salary:  $75,000 
per  year,  8  am  to  5  pm,  M-F. 
Apply  with  resume  to:  Director  of 
Operations,  S4  Consultants, 
Inc.,  99  Weatherstone  Drive,  Suite 
940,  Woodstock,  GA  30188. 


SAP  Specialist:  Assist  clients 
with  business  process  engineer¬ 
ing  to  redesign  and/or  reorganize 
business  activities  to  achieve 
greater  productivity  and  efficiency 
through  the  use  of  SAP  R/3 
enterprise  resource  planning 
(ERP)  software.  Responsible  for 
administration  of  subordinates 
and  daily  performance  of  instal¬ 
lations,  user  security  and  profile 
admini-stration,  client  copy  and 
transport.  Configu-ration  of  Ft/3 
with  more  connections  to  SAP. 
BS  in  Comp.  Science,  Comp. 
Engg..  or  Elec.  Engg.  (or  equiv) 
&  1  yr  exp.  Send  resume:  FIR 
Dept.,  Samsung  SDS  America 
Inc.,  15  Corporate  Place  South, 
Piscataway,  NJ  08854. 


F/T  Engineer  responsible  for  the 
design,  development,  debugging, 
and  testing  of  hardware  products 
based  on  Intel  x86  Architecture 
based  CPU  subsystems.  Exten¬ 
sive  knowledge  of  design  tools 
like  schematic  capture,  cross-talk 
analysis  and  logic  stimulation 
required.  Must  have  knowledge 
of  x86  operating  systems  like 
Windows  NT/98/2000/M E  and 
UNIX.  Will  be  required  to  coordinate 
artwork,  prototyping,  and  com¬ 
patibility  testing  with  others 
engineering  groups.  Must  have  a 
Master's  degree  in  Engineering, 
or  foreign  degree  equivalent. 
Must  have  2  yrs.  of  exp.  in  job 
offered  or  a  position  w/same 
duties.  Salary:  $74,179/yr.  Send 
resume  to:  Srivatsan  Ramachan- 
dran,  AMI,  6145-F  Northbelt 
Pkwy.,  Norcross,  GA  30071. 


Software  Engineer  wanted  by 
consulting  co.  in  Edison,  NJ. 
Must  have  a  Master  degree  in 
computer  science  with  at  least 
one  year  experience  in  designing 
and  developing  object-oriented 
software  architecture  using 
C++,  Java,  Corba,  Client/Server 
architecture,  middleware  tech¬ 
nology  and  Relational  Database. 
Knowledge  in  analytical  method 
is  required.  Please  send  Resume 
toYoungTech,  Inc.,  379Thornall 
Street,  Fifth  Floor,  Edison,  NJ 
08837.  Fax  number  :  732-548- 
8668. 


SOFTWARE  ENGINEER  to  pro¬ 
vide  on-site  consultancy  to 
analyze,  design,  develop,  test, 
implement  and  support  business 
systems  and  application  software 
for  e-commerce  using  J2EE, 
WebSphere,  WebLogic,  Tomcat, 
XML,  i-Planet  Enterprise  Server. 
Visual  Basic,  C++,  UNIX,  Oracle, 
SQL  Server,  COM/DCOM  using 
OCI,  JDBC  with  web  applications 
in  client/server  and  objet  oriented 
environment.  Require:  Bachelor 
(or  equivalent)  in  Computer  Sci¬ 
ence  and  three  years  experience 
in  the  job  offered  or  as  Systems 
Analyst.  40%  travel  required  to 
client  sites  within  the  United 
States.  Salary:  $67,500  per  year, 
8:30  am  to  5  pm,  M-F.  Apply 
with  resume  to:  President,  I.T. 
Group,  Inc.,  751  Goldenrod  Way, 
Norcross,  GA  30093. 


Technical  Consultant  -  Research, 
design,  develop  &  test  software 
for  business  apps,  specializing  in 
Oracle-based  applications,  archi¬ 
tectures  &  customizations.  Min 
Reqs:  MS  in  CS,  EE,  Math,  or 
foreign  deg.  equiv.  and  3  yrs 
progressive  post-bacc.  exp.  in 
the  field  of  database  dev.  incl. 
specific  exp.  w/  Oracle  database; 
DTS  database  migration;  Solaris 
or  Alpha  Unix;  VB;  and  exp.  build¬ 
ing  Internet-accessible  database. 
Must  be  willing  to  travel  exten¬ 
sively.  Travel  reimbursed  by 
employer.  In  the  alternative,  will 
accept  BS  in  CS,  EE,  Math,  or 
foreign  deg.  equiv.  and  5  yrs 
progressive  post-bacc.  exp.  as 
described  above.  Please  e-mail 
resume  to  Onyx  Software  Corp. 
FIR  at  KatieC@onyx.com  Ref  # 
1234. 


Software  Engineer:  Integration 
of  Enterprise  Apps  &  Legacy 
Sys  (including  web  enabling 
legacy  data);  mainframe  data 
translation,  object  modeling, 
distributed  app.  development  & 
asynchronous  software  develop¬ 
ment  using  EJB,  JMS,  CORBA 
2.3,  RMI  on  Windows  2000, 
NT,  Solaris  8  platforms  w/Vitria 
and  Orbix2000  middleware  for 
telecommunications  clients.  Req: 
MS  in  engg.  Resumes  to:  Technical 
Recruiter,  Highland  Technology 
Group,  8610  Roswell  Rd.,  Suite 
900-#222,  Atlanta,  GA  30350 


Program'rs/Analysts:  Analyze, 
plan,  devlp  &  test  sw  applic'ns 
for  cable  communica'n  indus¬ 
try;  Evaluate  user  request  to 
program  &  modify  applica'n 
w/  VC++,  JDK1.2,  Corba, 
AnsiC++  on  PowerTV/NT 
Platform.  40h/w,  8-5,  BS  dgr 
or  foreign  equivalent  and  1  -yr  wk 
exp  in  any  position  involv’g 
JDK1.2  &  PowerTV.  Resume 
to  J.  Bhasin,  Itaas,  Inc.  4530 
S.  Berkeley  Lk  Rd.  #A, 
Norcross,  GA  30071 /email: 
iasoal.bhasin@itaas.com 


Software  Engineer 

Maintain  and  install  software, 
provide  backup  and  recovery 
process  planning  for  Oracle  8i 
database  and  MS  SQL  Server. 
Provide  back  up  administration 
support  for  all  database  sites. 
Assist  in  the  improved  tuning  of 
current  configurations,  assist  in 
implementing  any  new  applica¬ 
tions  to  the  system  and  assist  in 
the  set  up  of  standard  adminis¬ 
tration  processes  and  tools.  Must 
have  a  BS  or  BT  in  CS  or  EE  or 
Mathematics  or  related  field,  2 
yrs.  of  exp.  in  above  position  or  2 
yrs.  exp.  as  a  Software  Engineer 
or  related  position  w/ability  to 
use:  Oracle  Database  and  MS 
SQL  Server. 

40.0  hrs./wk8:00  AM  -  5:00  PM 
$67,046/Yr 

Applicants  send  cover  letter 
and  resume  to: 

M.  Shengaout 

Reusable  Software  Components 
415  Sable  Drive 
Alpharetta,  GA  30004 


Network  Administrator.  Atlanta, 
GA.  Manage  communications 
network  in  Windows  NT/2000 
environment.  Estbl.  physical 
database  parameters.  Monitor  & 
manage  ntwrk.  security,  ntwrk. 
memory  capacity  &  invntry. 
applic.  Estbl.  personal  &  share 
ntwrk.  storage  for  data  &  applic. 
files.  Install  new  ntwrk.  hardware, 
components  &  software  applies. 
Perform  daily  ntwrk.  monitoring 
incld.  back  ups  &  restoring  lost 
files.  Test  &  correct  errors,  & 
refine  changes  to  database. 
Requires:  B.S.  or  foreign  equiv. 
in  Civil  Eng’r,  Comp.  Sci,  or 
related  field;  and  2  yrs.  exp.  in  job 
offered.  Exp.,  which  may  have 
been  obtained  concurrently, 
must  include  2  yrs.  exp.  adminis¬ 
tering  &  maintaining  network 
system  in  NT  Windows  Operating 
System  &  hardware  platform. 
Send  resumes  (no  calls)  to  Stella 
Ceron,  La  Sagrada  Familia, 
3754  Buford  Hwy,  Ste.  A-4, 
Atlanta,  GA  30329. 


Manufacturing  Software  Engineer. 
Owings  Mills,  MD.  Assist  Smart- 
card  eng.  mgr.  to  design/develop 
software  to  interface  custom 
machines  and  to  manage,  move 
and  manipulate  datafiles.  Interface 
with  international  team.  Direct 
factory  support  is  required.  Req.: 
B.S.  in  CS  or  EE  and  working 
knowledge,  through  academic 
coursework  or  experience,  of 
HMI,  VB6,  SQL, NT  Server  and 
Oracle  7/8.  Salary:  $53-55K/ 
yr.  Resume  to:  Gaye  Sauer, 
Schlumberger  Malco,  9800 
Reisterstown  Rd.,  Owings  Mills, 
MD  21117. 


Database  Administrator 
&  Designer 

Maintain  database  and  assist  in 
the  design  and  development  of 
applications  including  Customer 
Information  DataWarehouse  and 
Relational  Data  Mart.  In  addition, 
maintain  standby  databases  and 
replicated  systems  for  fail-safe 
assured  availability  requirements 
of  the  Outage  Management 
System  and  Mobile  Dispatch 
System.  Must  be  willing  to  travel 
for  extended  periods  of  time. 
Must  have  an  MS  in  CS  or  related 
field,  2  yrs.  of  exp.  in  above  posi¬ 
tion  or  2  yrs.  exp.  as  a  DBA  & 
Designer  or  related  position 
w/ability  to  use:  HP  9000,  Windows 
NT,  HP-UX,  and  must  have  Oracle 
Certification. 

40.0  hrs./wk  8:00  AM  -  5:00  PM 
$70,000/Yr 

Applicants  send  cover  letter 
and  resume  to: 

CK  Kumar 
Cyber  Korp.  Inc. 

9667-B  Main  Street 
Fairfax,  VA  22031 


Project  Leaders  sought  by  tech 
dept  of  legal  information  co.  in 
NYC.  Design  &  develop  Web- 
based  eCommerce  applications. 
MS-Windows  using  C++,  VB, 
MTS,  MSMQ,  ASP,  JavaScript, 
COM/COM+,  Oracle  &  SQL 
Server.  Work  with  mktng  &  prod 
dvlpmt  teams  to  develop  new 
products  &  migrate  core  business. 
Resumes  to  HR  Dept,  CCH 
Legal  Information  Services,  1 1 1 
8th  Ave„  NY,  NY  10011. 


F/T  Systems  Analyst  responsible 
for  computer  programming,  sys¬ 
tems  analysis,  design,  coding, 
system  implementation,  mainte¬ 
nance,  program  management, 
documentation,  training,  and 
other  data  processing  services 
using  SQL,  C/C++,  Java,  and 
Lotus  Notes/Domino.  Other 
responsibilities  include  learning 
new  applications,  coding,  devel¬ 
oping  tests  and  testing  using 
RDMS,  PERL,  and  CGI.  Must 
have  2  yrs.  of  exp.  in  job  offered 
or  a  position  with  the  same 
duties.  Salary:  $80,000/yr.  Send 
resume  to:  Job#  SAC-108, 
E.C.S.,  Inc.,  8744  Main  Street, 
Suite  101,  Woodstock,  Georgia 
30188. 


PROGRAMMER/ANALYST  to 
develop,  test  and  analyze  business 
applications  requirements  for 
ERP  software  using  C/C++, 
PeopleSoft  applications,  Oracle 
NVision,  Crystal  Reports,  Query, 
Application  Engine  and  Acuate 
Report  Writer  in  UNIX/Windows 
client/server  environment.  Require: 
Bachelors  in  Computer  Science 
and  two  years  experience  in  the 
job  offered.  40%  travel  to  client 
sites  within  the  United  States 
required.  Salary:  $68,000  per 
year,  8  am  to  5  pm,  M-F.  Apply 
with  resume  to:  Director  of 
Operations,  S4  Consultants, 
Inc.,  99  Weatherstone  Drive, 
Suite  940,  Woodstock,  GA 
30188. 


Software  Engineer:  Entry  level 
position  in  Atlanta,  GA  to  assist 
Sr.  Software  Engineer  to  design, 
develop,  implement  &  maintain 
server  side  dll  programs  using 
VB6,  VC++6,  DB2  or  Oracle. 
Also  use  SQL  database  server 
design  database  for  client  side. 
Req.  B.Sc.  in  C.Sc.,  or  other 
closely  related  field.  No  work 
exp.  required  but  must  demon¬ 
strate  ability  to  perform  job 
through  course  work/projects  in 
C++  &  SQL.  Send  resume 
w/school  transcript  to:  HR  Director, 
Axiom  Corp.,  3490  Piedmont 
Road,  Suite  1401,  Atlanta,  GA 
30305. 


Web  Marketing  Manager  req'd 
by  Internet  and  Wireless  Solu¬ 
tions  Firm  to  identify  and  study 
markets  for  Internet  and  Wire¬ 
less  applications,  services  and 
collaborations.  Generate  market 
interest  for  company  products 
and  services  using  the  Internet. 
Manage,  maintain  and  enhance 
the  content  and  functionality  of 
the  company  website.  Devise 
marketing  strategies  and  web- 
based  marketing  programs  to 
develop  prospects  and  demon¬ 
strate  product  features.  Prepare 
proposals  and  presentations, 
interface  with  clients  and  over¬ 
see  projects.  Set  targets  through 
marketing  campaigns.  Use 
HTML,  Javascript  and  Dream¬ 
weaver  in  performance  of  duties. 
Must  have  Masters  in  Business 
plus  1  yr.  of  exp.  in  similar  or 
related  duties.  Send  cover  letter 
and  resume  to:  James  Jose, 
Chief  Executive  Officer,  Atinav, 
Inc.,  1  World  Trade  Center,  Suite 
7867,  New  York,  NY  10048. 


Project  Managers  wanted  by 
software  consulting  co.  to  manage 
a  team  of  software  professionals 
to  design/develop  custom-made 
software  aplns;  interact  w/users/ 
technical  staff  to  analyze  system 
reqmts;  perform  project  rngmt 
duties  to  meet  deadlines/budget 
constraints;  use  project  mgmt 
tools  incl.  MS  Office,  MS  Project; 
use  development  languages  incl. 
C,  C++,  VB.  Use  RDBMS  systems 
inc.  Oracle,  SQL  Server;  config¬ 
ure/install  apln  servers  incl. 
Websphere,  Weblogic  and  iPlanet; 
use  UML  design  methodologies 
i.e.  Booch,  Raumbaugh,  Rational 
Rose;  use  operating  systems 
incl.  Linux,  Unix,  Windows  NT. 
Must  have  Bach,  in  Comp.  Eng., 
Comp.  Sci.,  or  equiv.  +  2  yrs  exp. 
Respond  to  E-Zing  Technologies, 
Inc.,  41-43  Beekman  St.,  3rd  FI, 
NY,  NY  10038;  fax  (212)  233- 
9862,  hr@e-zingtech.com 


Data  Base  Administrator  needed 
to  design,  logical  &  physical  data 
bases  (SQL)  for  Commodities 
Trading  &  Clearing  Company  in 
NYC;  35hrs/wk;  BS  deg  in 
Computer  Engrg,  MIS  or  Math  & 
4  yrs  exp  in  job.  Send  resumes 
to  Pioneer  Futures,  Inc.,  Attn: 
Mark  B.  Gonzalez,  One  North 
End  Av  St#  1251,  NY,  NY  1 0282. 


Software  Developers  needed  to 


analyze,  dsgn,  dvlp  systems  & 


applies  using  Java,  HTML; 


provide  db  dsgn  &  admin  for 


e-commerce  applies.  Apply  to 


R.  Gorga,  Sengen,  1000  Briggs 


Rd,  Mt.  Laurel,  NJ  08054. 


STAFF  CONSULT./ 

SAP  INFO.  ANALYST 
(MULT.  OPENINGS) 

Applyg.  know,  of  SAP  prgmg. 
techs.  &  computer  sys.,  plan, 
dvlp.,  test,  implement.  &  document 
comp,  prgms.  Eval.  users’  rqsts. 
for  new  or  modified  prgms.  Make 
site  visits  as  needed  to  gather 
info.  &  analyze  sys.  rqmts.  Consult 
w/users  to  identify  oper.  proce¬ 
dures,  clarify  prgm.  objectives,  & 
leverage  the  functionality  of  SAP 
software  to  address  critical  rqmts. 
Apply  know,  of  industry  best- 
practices  while  configuring  the 
SAP  software  &  dsgng.  enhance¬ 
ments  to  optimize  processes. 
Utilize  all  components  of  the 
SAP  dvlpmt.  envmt.  to  combine 
pre-dvlpd.  software  objects  w/ 
customized  prgmg.  to  generate 
appls.  that  are  highly  integrated 
w/the  SAP  R/3  sys.  Oversee  install, 
of  hardware  &  software.  Train  & 
provide  tech,  support  to  users  of 
SAP  prgm.  Monitor  performance 
of  sys.  after  install.  Master’s 
degree  in  Comp.  Sci.,  Bus.  or 
Engrg.  rqd.  (Bachelor's  degree  in 
one  of  the  above-enumerated 
fields  plus  5  yrs.  of  prog.  resp. 
work  exp.  in  the  position  offrd.  or 
as  a  Sys.  Analyst  or  Software 
Engr.  will  be  accepted  in  lieu  of  a 
Master's  degree).  Must  know 
SAP/R3  prgmg.  language.  40 
hrs/wk,  8  am  -  5  pm.,  OT  as  rqd. 
$90,000/yr.  Qualified  applicants 
report/submit  resume  to:  Fayette 
County  Team  PA  CareerLink, 
ATTN:  JS  Supervisor,  32  Iowa 
St.,  Uniontown,  PA  15401-3513. 
Refer  to  Job  Order  No. 
WEB1 93834. 


Curl  Corporation,  an  Internet 
infrastructure  products  developer 
of  next  generation  Web  applica¬ 
tions,  is  looking  for  a  candidate 
to  fill  the  position  of  Software 
Engineer. 


If  you  are  interested,  please 
send  your  resume  to  Janet 
Carlson,  Manager  Human 
Resources,  Curl  Corporation, 
400  Technology  Square,  8th 
Floor,  Cambridge,  MA  02139. 


ePresence  Web  Consulting,  Inc., 
has  multiple  openings  for  its 
offices  in  New  Jersey  for  experi¬ 
enced  Software  Engineers, 
Programmer  Analysts  and  Web 
Developers  skilled  in:  Oracle, 
Sybase,  C++,  Java,  VB,  HTML/ 
DHTML,  IIS,  ASP,  MTS,  web/ 
wireless  technologies,  etc.  BS/MS 
required  with  2  yrs  experience. 
Highly  competitive  salary,  travel/ 
relocation  required.  Send  resumes 
to  ATTN:  HR,  12  Broad  Street, 
Suite  5,  Red  Bank,  NJ  07701 


F/T  Sr.  Programmer:  Resp.  for 
creating,  customizing  &  designing 
software  &  object  module  compo¬ 
nents,  object  designs  &  flowchart 
systems  according  to  specific 
design  specifications  or  user's 
needs;  using  Oracle  Reports  & 
Forms  inc.  Order  Entry  Forms 
using  Server-side  stored  proce¬ 
dures,  &  migrate  Oracle  7.x  to 
8.x  &  Oracle  Developer  2000  to 
6.0;  test,  debug  &  maintain  pro¬ 
grams  &  code  instructions  working 
w/PL/SQL  &  SQL-Plus.  Update, 
repair,  modify  &  expand  existing 
programs.  Must  have  Bachelors 
degree  in  CS,  Computer  Engineer¬ 
ing  or  related  field.  Foreign  degree 
equiv.  accepted.  Must  have  3  yrs. 
exp.  in  job  offered  or  position  w/ 
same  duties.  Send  resume  to 
Kathleen  V.  Spencer,  AFLAC,  at 
1932  Wynnton  Rd.,  Columbus, 
GA  31999. 


SOFTWARE  ENGR. 

(MULTIPLE  OPENINGS) 

Analyze,  dsgn.,  dvlp.,  test  &  code 
commercial  applications.  Ana¬ 
lyze,  eval.  &  modify  existing  or 
proposed  software  systems. 
Coord,  w/user  to  ensure  timely 
&  efficient  delivery.  Analyze 
software  rqmts.  to  determine 
feasibility  of  design  w/in  time  & 
cost  constraints.  Consult  w/other 
engrs.  to  eval.  interface  btwn. 
hardware  &  software,  &  opera¬ 
tional  &  performance  rqmts.  of 
overall  system.  Formulate  & 
dsgn.  software  system  using 
scientific  analysis  &  mathematical 
models  to  predict  &  measure 
outcome  of  consequences  & 
dsgn.  Dvlp.  &  direct  software 
system  testing  procedures,  pro¬ 
gramming  &  documentation. 
Master's  degree  in  Com.  Sci., 
Engrg.,  Bus.,  Math  or  Physics 
plus  one  year  experience  in 
position  offered  or  as  Software 
Engr.,  Programmer  Analyst, 
Systems  Analyst  or  Software 
Consultant  rqd.  (Bachelor's 
degree  in  one  of  the  above- 
enumerated  fields  plus  five  years 
of  prog.  rsp.  exper.  in  the  position 
offrd.  or  as  a  Software  Engr., 
Programmer  Analyst,  Systems 
Analyst  or  Software  Consultant 
will  be  accepted  in  lieu  of  a 
Master’s  degree.)  Must  have 
working  knowl.  of  Oracle  RDBMS; 
Visual  Basic  or  Java  languages. 
High  mobility  preferred.  40  hrs/wk, 
8  a  m.  -  5  p.m.,  $70,000/yr. 
Qualified  applicants  report/sub¬ 
mit  resume  to;  Manager,  Beaver 
County  Team  PA  CareerLink, 
2103  Ninth  Avenue,  Beaver 
Falls,  PA  15010-3957.  Refer  to 
Job  Order  No.  WEB191881 . 
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Database  Analyst  (Multiple 


Positions)  wanted  in  Houston, 


TX.  Apply  to:  HR  Dept.,  Jewelry 


Kingdom.  7500  Bellaire  Blvd. 


#618,  Houston,  TX  77036. 


Consultants/IT  Professionals 
needed  for  Germantown,  TN 
based  company.  Cook  Systems 
International,  Inc  has  several 
senior  and  mid-level  positions 
available  for  qualified  candidates 
possessing  MS/BS  or  equivalent 
and/or  relevant  work  experience. 
Work  with  some  of  the  following: 
Rational  Rose,  EJB,  UML,  and 
Java.  Send  confidential  resume 
to:  Cook  Systems  International, 
Inc.,  Attn:  Heather  Lasher,  6799 
Great  Oaks  Blvd,  Atrium  II 
Suite  200,  Germantown,  TN 
38138.  Visit  our  website  at 
wvnv.cooksys.com 


♦ 


Responsible  for  managing  multi¬ 
ple  hardware  and  relational  data¬ 
bases  for  the  computer  systems 
of  corporate  human  resources 
(CHR)  division.  Administers 
operation  of  multiple  client-server 
systems  and  databases  in  the 
creation  of  corporate  human 
resources  standards  and  proce¬ 
dures  relating  to  human  resources 
(HR)  software.  Consults  on 
database  design,  maintenance, 
enhancements,  expansion  of 
logical  design  and  physical 
database  as  per  corporate 
requirements  in  HR  applications/ 
business  systems.  Programs 
customized  data  loads,  utilities 
and  queries.  Develops,  imple¬ 
ments  and  supports  database’s 
reviews.  Validates  and  enhances 
logical  database  designs  and 
defines  and  implements  physical 
database.  Performs  capacity 
planning  for  various  systems  and 
databases.  Performs  database 
performance  monitoring,  tuning, 
backup  and  recovery  operations. 
Installs/upgrades  Oracle  RDBMS 
and  related  products.  Utilizes 
knowledge  of  a  broad  range  of 
database  client-server  technology 
(including  Oracle  RDBMS,  SQL, 
PL/SQL,  SQL  Loader,  SQL  Net, 
TCP/IP,  LAN  and  NT/Unix 
operating  systems)  as  well  as 
human  resources  applications/ 
business  systems.  Applicants 
must  possess  a  Bachelor’s 
degree  in  Computer  Science 
and  five  years  experience  in 
Oracle  RDBMS,  system  design 
and  analysis  with  client-server 
technology,  three  years  experi¬ 
ence  in  Oracle  database  ad¬ 
ministration,  performance  tuning, 
backup/recover,  Oracle  utilities 
and  capacity  planning,  and  two 
years  experience  in  Human 
Resources  applications/business 
systems  and  five  years  experi¬ 
ence  in  the  job  offered  or 
as  a  Database  Administrator, 
Programmer  or  Engineer.  40  hrs 
per  week  (7:45  A.M.  to  4:25 
PM.).  $78,000.00  per  year.  Job 
located  in  Abbott  Park,  Illinois 
Applicants  must  show  proof  of 
legal  authority  to  work  in  the  U.S. 
Send  resumes  to  ILLINOIS 
DEPARTMENT  OF  EMPLOY¬ 
MENT  SECURITY,  401  South 
State  Street  -  7  North,  Chicago, 
Illinois  60605.  Attention:  Brenda 
Kelly.  Reference  #  V-IL  24613  - 
K.  AN  EMPLOYER  PAID  AD. 
NO  CALLS  -  SEND  2  COPIES 
OF  BOTH  RESUME  AND  COV¬ 
ER  LETTER.  All  resumes  will  be 
noted  and  forwarded  to  the 
employer  for  consideration. 


Manufacturing  comp,  in  Aurora, 
IL.  Req.  Software  Eng.  with  M/S 
deg.  &  1  yr.  exp.  or  equivl.,  w/foll; 
AS/400,  PRG/400,  CLV400, 

RPG/400,  SQL,  ACCESS.  Des., 
dev,  maintain,  software  progs. 
Interface,  code  &  test  programs. 
Write  reports,  formulate  software. 
Send  res.,  Dept.  GC,  Sunbeam 
Health  &  Safety  Prod.  3901 
Liberty  St.  Road,  Aurora,  IL 
60504. 


Software  Developer  wanted  by 
Int'l  Mktg  Research  Co  in  TX. 
Oversee  design  applications, 
write  flowcharts  &  program 
descriptions;  collect  &  analyze 
data.  MS  in  Comp  Sci  &  1  yr  exp 
in  job  offered  req.  Respond  to: 
HR  Director/Millward  Brown, 
1250  Capital  of  TX  Highway, 
Bldg  1 ,  Ste  600,  Austin,  TX 
78746. 


Software  Engineer  (St.  Louis, 
MO):  design,  develop  and  main¬ 
tain  Internet/Intranet  applications 
utilizing  C/C++,  Java,  JSP,  Visual 
Basic,  SQL,  Oracle,  ASP,  XML 
and  Coldfusion;  evaluate  systems 
effectiveness,  recommend  im¬ 
provements,  and  troubleshoot 
problems  in  programming  and 
other  project  specifications. 
Requires  MS  in  Comp.  Sci.  or 
CIS  plus  min.  6  mo.  exp.  Compet¬ 
itive  salary;  40hr/wk;  Mon.-Fri., 
8:00am-5:00pm.  Resume  to 
Marti  Stubblefield,  HR  Dept., 
Hellmuth  Obata  &  Kassabaum, 
Inc.  211  N.  Broadway,  Suite  600, 
St.  Louis,  MO  63102.  No  phone 
call/EOE 


Web  Developer  needed  by  a 
Design/Communication  Company 
in  North  Chicago,  IL.  Must  have 
a  Bachelor's  Degree  in  Computer 
Science,  Mathematics,  with  6 
months  experience  in  database 
design  and  development.  Respond 
to:  VP,  Strategic  Accts.,  Studio 
North,  Inc.,  1616  Green  Bay 
Road,  North  Chicago,  IL  60064. 


Management  &  Systems 
Consulting  Advertisement 

Permanent  opening  for  Project 
Manager  -  SAP  Specialist  in 
Chicago,  IL  to:  Conduct  initial 
business  analysis  of  company 
operations  to  identify  areas  of 
cost  reduction  and  system 
optimization  through  the  imple¬ 
mentation  of  the  R/3  Network 
Software  System;  define  a 
company-wide  project  plan  for 
the  implementation  of  the  system; 
manage  and  direct  overall  network 
system  and  system  configuration 
in  areas  of  accounting,  manu¬ 
facturing,  sales  and  human 
resources;  manage,  direct  and 
supervise  programmers  in  im¬ 
plementing  the  system;  manage 
and  direct  project  budgeting, 
financing  and  pricing.  Must  have 
Master's  degree  in  Communica¬ 
tions  Science,  Business  Admin¬ 
istration  or  related  field  as  well  as 
two  years  of  experience  as  a 
Systems  Analyst  -  SAP  Specialist. 
Send  resume  to:  Management  & 
Systems  Consulting  Inc.,  70 
West  Madison,  Three  First 
National  Plaza,.  Suite  1400, 
Chicago,  IL  60202. 


2  Senior  Consultants  for  San  Fran 
office.  Positions  involve  design  & 
dev't  of  web-based  e-business 
applications  for  our  clients  incl. 
testing,  data  model  &  DB  Design. 
Involves  project  management 
working  w/OO  methods,  MVS  & 
UNIX,  Versata,  data  warehouse, 
Java.  Must  have  BS  Degree,  5 
yrs.  relevant  exp.  incl.  project 
management  exp.  Send  res.  to 
Shared  Vision  Group,  168 
Madison  Ave.  6th  FI.  NY,  NY  1 001 6 
corporate  @  sharedvision.com 


Software  Engineer  (multiple 
positions,  St.  Louis,  MO)  design/ 
analyze/maintain  Object  Oriented 
software  applications  in  Windows 
NT/2000  environment  utilizing 
Java,  CORBA,  GUI,  XML,  HTML, 
ODBC.  Require  BS  degree  in 
Comp.  Sci.,  Elect.  Engr,  MIS  or 
in  a  closely  related  field  plus  min. 
2  yrs.  exp.  in  offered  position  or 
as  systems/programmer  analyst. 
Competitive  salary.  Resume  to: 
Ken  Totten,  Object  Computing, 
Inc.,  12140  Woodcrest  Executive 
Dr.  Suite  250,  St.  Louis,  MO 
63141.  EOE 


Database  Analyst  (Kansas  City, 
MO)  to  assist  in  the  design  and 
enhancement  of  medium-to-large 
scale  database  structures  in  both 
main  frame  and  client-server 
environment,  applying  RDBM 
tech.,  C,  UNIX,  Oracle,  PL/SQL, 
and  VMS.  Requires  B.S.  in 
Comp.  Sci.,  Elec.  Engr.,  MIS  or 
in  a  closely  related  field  plus  min. 
1  yr.  exp.  Competitive  salary, 
40hr./wk;  Mon.-Fri.,  7am-4pm. 
Resume  to:  Ms.  Binkley,  HR, 
Commerce  Bank,  825  Main  St., 
Kansas  City,  MO  64105.  No 
phone  call/EOE 


COMMUNICATIONS  TECHNOL¬ 
OG  I  ST  needed,  to  be  responsi¬ 
ble  for  interfacing  between  IT 
engineers  and  large  end  users  in 
system  design  for  server  based 
local  area  and  wide  area  networks, 
including  optical  networks, 
providing  technical  education. 
Requires  minimum  2  years 
experience.  Submit  resume  to 
Michael  Mellinger,  HR,  Belden 
Wire  &  Cable,  2200  US  Highway 
27  South,  Richmond,  IN  47374. 
EOE. 


Systems  Analyst.  Analyze,  design, 
and  develop  new  computer  sys¬ 
tems  and  application  programs 
to  meet  customer  needs;  develop 
and  implement  conversion  plans; 
prepare  and  process  models; 
direct  and  review  the  work  of 
development  team  members; 
and  assign  team  members  to 
projects.  Must  have  Bachelor's 
degree  in  Computer  Science, 
Engineering  or  related,  plus  one 
year  experience  and  knowledge 
of  EJB,  Threads,  Swing,  Java  2, 
HTML,  TCP/IP,  UNIX  and  Oracle/ 
SQL.  40  hrs/wk.  $1 00,000/year. 
Must  have  proof  of  legal  authority 
to  work  in  the  United  States. 
APAC  CUSTOMER  SERVICES, 
INC,  Attn:  Cindy  Corkery,  6 
Parkway  North  Center,  Deerfield, 
IL  60015.  Toll  free  #  (800)  776- 
2722.  EOC./AA 

APAC  CUSTOMER  SERVICES, 
INC.  is  not  affiliated  with  APAC, 
Inc.,  the  road  paving  and  con¬ 
struction  materials  company. 


E-Commerce/Web  Support 
Assistant  to  develop  and  maintain 
the  websites;  coordinate  soft 
installations;  design  GUI  screen 
and  graphics;  administer  and 
monitor  users  accessing  the 
systems;  provide  training  and 
assistance  to  customers  on 
in-house  computer  systems; 
operate  Data  Security  System. 
B.S.  in  business  administration 
or  computer  fields  and  one  year 
of  web  support  experience  that 
include  Network,  Seagull  Jwalk 
developer,  AS/400,  Window  NT, 
Java  Script,  ASP,  HTML,  SQL, 
Clarion  Language,  Web  Tool  and 
Animation  Tool.  40hrs/wk,  8am- 
5pm,  M-F.Job  is  in  St.  Louis,  MO. 
Send  resume  to  Automated 
Installment  System  Co.  955 
Executive  PKWY,  Suite  201 ,  St. 
Louis,  MO  63141  (Attn:  Carol 
Manson)  with  proof  of  legal 
authority  permanently  to  work 
in  U.S. 
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BUSINESS  ANALYST 
(MULTIPLE  OPENINGS) 

Providing  marketing  automation 
&  computer-related  statistical 
expertise  to  clients.  Specific  duties 
incl.:  (i)  bldg,  complex  bus.  analytic 
&  mktg.  applications  using 
Broadbase  software;  (ii)  provid. 
functional  expertise  to  define 
client  goals,  objectives,  critical 
success  factors  &  bus.  benefits; 
(iii)  analyzing  user  functional  & 
data  rqmts.;  (iv)  document,  prgm. 
dvlpmt.,  incl.  user  instructions; 
&  (v)  installing,  modifying  &  cus¬ 
tomizing  programming.  Bachelor’s 
degreein  Lib.  Arts,  Engrg.,  Bus. 
or  Sci. -related  field  plus  two 
years  of  exp.  in  position  offered 
or  as  a  Programmer/Analyst, 
Software  Engr.,  or  Stat.  Consul, 
rqd.  Expr.  must  incl.:  mktg., 
eMarketing  &  statistical  expertise; 
Broadbase  eMA  &  Broadbase 
EPM  ECRM;  MS  OLAP  Services 
&  Oracle  Databases;  Visual  Basic, 
SQL  &  MDX  languages;  UNIX 
operating  system.  High  mobility 
preferred.  40  hrs/wk,  8  a.m.  -  5 
p.m.,  $66,  670/yr.  Qualified  ap¬ 
plicants  report/submit  resume 
to:  Manager,  Beaver  County 
Team  PA  CareerLink,  21 03  Ninth 
Avenue,  Beaver  Falls,  PA  15010- 
3957.  Refer  to  Job  Order  No. 
WEB191896. 


SYNAPSE  GROUP,  INC.,  a 
leading  computerized  magazine 
marketing  company,  is  looking  to 
hire  qualified  candidates  with,  at 
minimum,  a  Bachelors  degree  in 
Computer  Science,  Information 
Systems  or  it’s  equivalent  for  the 
following  positions: 

WEB  DEVELOPER  to  design, 
develop  and  create  Internet  ap¬ 
plication  systems  that  can  handle 
order  entry,  database,  data 
retrieval,  report  generation  and 
document  management,  using 
HTML,  SQL  and  ASP  for 
requesting  clients.  Maintain 
existing  systems  and  add 
enhancement  features.  Two 
years  of  experience  in  the  job 
offered  required  with  sound 
knowledge  in  Java,  JavaScript, 
HTML,  SQL,  ASP,  Front  Page, 
Sun  Solaris,  Window  95/NT, 
Access  and  Oracle  database. 
COMPUTER  PROGRAMMER 
to  plan,  develop,  test,  document 
and  update  computer  programs, 
evaluate  user  requirements,  pre¬ 
pare  flow  charts  and  diagrams 
and  convert  project  specifica¬ 
tions.  Two  plus  years  of  software 
development  experience  required 
with  knowledge  in  Java,  Java 
Script,  HTML,  Unix,  Telnet,  XSLT, 
COBOL,  Windows  NT,  Web 
Development,  Access  and  Oracle 
database 

ASP  DEVELOPER  to  implement 
Internet  applications  for  order 
entry,  data  retrieval,  report  gen¬ 
eration  and  document  manage¬ 
ment  using  ASP,  HTML  and  SQL 
programs  to  implement  new  sys¬ 
tems  into  several  multifunctional 
tiers  that  handle  data  processing 
and  database,  and  to  maintain 
and  add  enhancement  features 
to  existing  systems.  Two  years 
experience  in  the  job  offered 
required  with  extensive  knowledge 
in  ASP/ADO,  VBScript,  IIS,  SQL, 
Oracle  RDBMS,  Unix,  Java, 
HTML,  and  WWW  and  related 
protocols. 

E-COMMERCE  DEVELOPER 

to  develop  and  design  e-com¬ 
merce  applications.  Design, 
develop  and  create  Internet 
application  systems  that  can 
handle  order  entry,  database, 
data  retrieval,  report  generation 
and  document  management, 
while  maintaining  and  adding 
enhancement  features  to  existing 
systems.  At  minimum,  Bachelors 
degree  in  noted  fields  above  or 
in  Business  Administration  or  it’s 
equivalent  required  plus  two 
years  of  experience  in  the  job 
offered  with  extensive  knowledge 
in  ASP/ADO,  VBScript,  IIS,  SQL, 
Oracle  RDBMS,  Unix,  Java, 
HTML,  and  WWW  and  related 
protocols. 

The  company  offers  a  competitive 
compensation/benefit  package 
and  an  environment  where 
achievements  are  recognized  & 
professional  growth  is  encour¬ 
aged.  Qualified  applicants  are 
encouraged  to  mail  resumes  to: 
HR  Department,  Synapse 
Group,  Inc.,  Four  High  Ridge 
Park,  Stamford,  CT  06905-1 325. 


For  over  20  years,  Syntel  employees  across  North  America,  Europe,  and 
Asia  have  helped  build  advanced  information  technology  systems  for  lead¬ 
ing  Fortune  500  companies  and  government  organizations  to  improve  their 
efficiency  and  competitiveness.  Today,  Syntel  professionals  are  building 
rewarding  careers  by  providing  solutions  in  e-business,  CRM,  Web  Design 
and  Data  Warehousing. 

Come  discover  why  Forbes  magazine  placed  Syntel  second  on  its  list  of 
“The  200  Best  Small  Companies  in  America"  and  Business  Week  ranked 
us  #1 1  on  its  list  of  Hot  Growth  Companies. 

Due  to  our  rapid  growth,  we  have  immediate,  full-time  opportunities  for 
both  entry-level  and  experienced  Software  Engineers,  Consultants, 
Programmers,  Programmer/Analysts,  Project  Leaders,  Project  Managers, 
Supervisors,  Database  Administrators,  Computer  Personnel  Managers 
and  Computer  Operations/Account  Managers/Account  Executives  with 
any  of  the  following  skills: 

Mainframe 

•  IMS  DB/DC  or  DB2,  MVS/ESA, 

COBOL,  CICS 


•  Focus,  IDMS  or  SAS 


DBA 

•  ORACLE  or  SYBASE 


•  DB2 


Client-Server/WEB 

•  Siebel 

•  Websphere 

•  Com/DCom 

•  Web  Architects 

•  Datawarehousing 

•  Informix,  C  or  UNIX 

•  Oracle  Developer  or  Designer  2000 

•  JAVA,  HTML,  Active  X 

•  Web  Commerce 

•  SAP/R3,  ABAP/4  or  FICO  or  MM 
&SD 


•  Oracle  Applications  &  Tools 

•  Lotus  Notes  Developer 

•  UNIX  System  Administrator 

•  UNIX,  C,  C++,  Visual  C++,  CORBA, 
OOD  or  OOPS 

•  WinNT 

•  Sybase,  Access  or  SQL  server 

•  PeopleSoft 

•  Visual  Basic 

•  PowerBuilder 

•  IEF 


Account  Executives,  Account  Managers  and 
Business  Development 

Positions  available. 


Some  positions  require  a  Bachelor's  degree,  others  a  Master's  degree.  We  also 
accept  the  equivalent  of  the  degree  in  education  and  experience. 

With  Syntel  (NASDAQ:  SYNT),  you’ll  enjoy  excellent  compensation,  full  benefits, 
employee  stock  purchase  plan  and  more.  Please  forward  your  resume  and  salary 
requirements  to:  Syntel,  Inc.,  Attn:  Recruiting  Manager-LD08,  2800 
Livernois  Rd„  Suite  400,  Troy,  Ml  48083.  Phone:  248-619-2800; 

Fax:  248-619-2888.  Equal  Opportunity  Employer. 


SVNirEL 
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IDG  Recruitment  Solutions 
offers  options  to  promote 
Diversity  in  IT  through 
Women  in  Technology 
International  (WITI) 

FastTrack,  Diversity 
Supplements  and  our 
exclusive  Outreach  Packages. 


I  DIVERSITY  IN 
I  IT  CAREERS 

Ithrdueh 

I  IDE  RECRUITMENT 

SOLUTIONS. 


To  further  your  Diversity 
efforts,  contact  IDG 
Recruitment  Solutions  about 
our  new  Diversity  in  IT  and 
Engineering  Publication  at 
Diversity@itcareers.net. 


Recruitment  Solutions 


IT  CAREERS 


Information 

Technology: 

Publishing 

Webcasts 

Research 

Events 


http://careers.idg.com 


»IDG 

INTERNATIONAL  DATA  GROUP 


Director,  Intramural  Information  Technology  Program  (IITP) 

The  National  Institute  of  Neurological  Disorders  and  Stroke 
(NINDS)  is  uniquely  dedicated  to  the  development  of  state- 
of-the-art  scientific  systems  and  methods  for  neurological 
research.  The  NINDS  seeks  to  fill  the  position  of  Director,  IITP 
to  plan  and  manage  the  design,  development,  and  implemen¬ 
tation  of  the  Division  of  Intramural  Research’s  (DIR) 
information  technology  systems,  with  emphasis  on  providing  a 
comprehensive,  state-of-the-art  environment  to  support  the 
mission  of  the  DIR.  The  successful  candidate  for  this  position 
must  have  demonstrated  the  ability  to  provide  strategic  direction 
and  management  for  IT  in  a  biomedical  research  environment 
to  include  experience  in  providing  diverse  multi-platform  IT 
support  to  research  staff.  Salary:  $87,864  -  $114,224  based  on 
experience.  For  more  information  on  the  position,  including 
qualifications,  please  visit  http://www.washinatonpost.com 
/wl/home.shtml  or  our  web  site  at  http://careerhere.nih.gov/ 
CHPublic/HRVacList.taf?form=list&  Title=CV&VACANCY  1C 

=NINDS. 

Please  direct  all  inquiries  and  send  resume  and  cover  letter, 
no  later  than  9/7/01,  to  Glenn  Hartzoge,  Bldg.  36,  Rm.  5A07, 
36  Convent  Drive,  MSC  4152,  Bethesda,  MD  20892-4152, 
(301)496-5468,  FAX  (301)496-4276,  or  e-mail  gh25@nih.gov. 

NIH  IS  AN  EQUAL  OPPORTUNITY  EMPLOYER 


TO  HIRE. 

Q  careers.com 

START 

WITH  US. 


IT  professionals  with  industry 
exp.  in  (various  skills  combination 
reqd.)  Oracle  7.x,  Sun  Solaris, 
Unix,  C,  C++,  Java,  Pro'C,  VIA- 
SOFT,  INFOMAN,  DB2,  ES9000, 
HP9000,  PDSMAN,  JSGF,  MVS/ 
XA,  IVR  Card,  SCO  Open  Server, 
Cisco  2501 ,  Informix  7.3,  WinNT 
4.0,  Sun  Enterprise  Server, 
IPX/SPX,  DHCP,  etc.,  needed. 
Some  positions  require  MS  or 
equiv.  CS,  Engg,  Math,  Bus. 
Admin,  or  rel.  field  while  others 
require  BS  or  equiv.  as  above. 
Pay  matching  with  exp.  Foreign 
educ.  equiv  &/or  combination 
of  educ/exp.  accepted.  Travel/ 
relocation  reqd.  Res.  &  salary 
expectations  to  Infotech  Profes¬ 
sionals,  Inc.,  5001  Hardley  Rd., 
South  Plainfield,  NJ  07080 


Lead  Analyst,  Data  Warehouse  -  Stamford,  CT 

GE  Card  Services  is  a  leader  in  providing  credit  services  to 
retailers  and  consumers.  Formed  in  1 932  as  a  provider  of  consumer 
financing  for  GE  Appliances,  Card  Services  provides  private  label 
credit  cards,  commercial  programs  and  card-related  financial  services 
for  hundreds  of  retailers  and  manufacturers  across  North  America. 

Responsibilities: 

•  Lead  multiple  projects  to  improve  or  add  new  functionality 
to  existing  data  management  applications  and  information  systems. 

•Analyze,  design  and  develop  data  management  solutions  utilizing 
data  management  architecture  tools  and  standards. 

•  Map  business  processes  to  applications  and  prepare  application 
configuration. 

•  Interact  effectively  with  clients,  team  members  and  other  IT 
partners  using  solid  written  and  verbal  skills. 

Qualifications: 

•  Bachelor's  degree  in  Computer  Science  or  Engineering. 

•  Four  years  developing  data  warehouses/information  solutions. 

•  Four  years  of  project  management  experience. 

•  Experience  with  relational  database  development,  SQL  Oracle 
PL/SQL,  Java  and  Perl  Scripting. 

•  Experience  with  multi-dimensional  databases.  Hyperion  Essbase, 
Oracle  express  and  OLAP  tools. 

•  Proficiency  in  Korn  Shell  Scripting  and  operating  in  a  Unix 
environment. 

•  Demonstrated  strong  leadership,  interpersonal,  facilitation  and 
communication  skills. 

When  applying  for  the  above  position,  please  send  resume 

via  email  to:  opportunities@gecareers.com  (ASCII  text 
preferred)  or  mail  it  to:  GE,  Suite  #26,  P.O.  Box  549231, 
Waltham,  MA  02454-923 1 . 

Please  refer  to  GECCS/256927/AN030  in  the  subject  line  of  your 
email  message  or  on  your  cover  letter.  Do  not  attach  resumes;  please 
copy  and  paste  your  resume  to  the  body  of  the  email  message  and 
submit  An  acknowledgment  letter  will  be  sent  to  confirm  receipt  of 
your  resume  into  our  electronic  database. 

We  offer  a  competitive  salary,  outstanding  benefits  package  and  the 
professional  advantages  of  an  environment  that  supports  your 
development  and  recognizes  your  achievements.  We  are  an  Equal 
Opportunity  Employer. 


GE  Card  Services 

We  bring  good  things  fr  ide 


Discover  solutions  that  reach  across 
the  continuum  of  care 


Explore  a  full  range  of  the  latest  technologies  to  help  you  enhance  your 
organization's  productivity,  increase  patient  satisfaction,  improve  the  quality 
and  delivery  of  care  —  and  most  importantly  —  leverage  your  existing 
technology  investments. 

•  Build  customer  loyalty  and  long-term  financial  viability 

•  Learn  about  the  latest  e-medicine  tools  to  improve  patient  health 

•  Leverage  new  technologies  into  sound  business  practices  and 
growth  opportunities 

•  Select  the  right  solutions  to  achieve  HIPAA  compliance 

Real  solutions  for  integrated  e-healthcare 

Conference:  October  29  -  November  1,  2001 
Exhibition:  October  30  -  October  31,  2001 
San  Diego  Convention  Center,  San  Diego,  California 

Register  at  www.windowsonhealthcare.com  by  August  31, 
type  in  Priority  Code  “IDG”  and  you’ll  save  $100! 


Plus,  receive  a  special  offer  on  the  Compaq  iPAQ™ 


r*i 


© 

MS(  HUG 

Microsoft  Healthcare 
Users  Ciroup 


hand-held  device  with  clinical  applications 
from  Allscripts  —  just  for  registering! 

The  Seventh  Annual  Conference 
and  Exhibition  of  the  Microsoft 
Healthcare  Users  Group  (MS-HUG) 


PRODUCED  BY: 


Key3St 


A  DIVISION  OF 
KEY3MEDIA  GROUP,  INC. 


Copyright  ©  2001  Key3Studios,  Inc.,  300  First  Avenue,  Needham,  MA  02494-2722.  All  Rights  Reserved.  Key3Media, 
Key3Studios,  Windows  on  Healthcare,  and  associated  design  marks  and  logos  are  trademarks  owned  or  used  under  license 
by  Key3Studios,  Inc.,  and  may  be  registered  in  the  United  States  and  other  countries.  Windows  is  a  trademark  of  Microsoft 
Corporation  and  is  used  by  Key3Studios  under  license  from  Microsoft.  WH01-9892  8/01 


Platinum  Sponsors 

IDG  Recruitment 
Solutions 
Yahoo!  Careers 

Gold  Sponsor 

Merck 


mtm 


Silver  Sponsor 

Verizon  Wireless 


Bronze  Sponsor 

Verizon 


Meet  face-to-face  with  the  area's  hottest  companies  and 
land  a  job  with  more  money,  opportunity  &  challenge! 


2001  UPCOMING  SCHEDULE  OF  EVENTS 

WESTBURY,  NY 

i  ATLANTA,  GA 

;  WASHINGTON,  DC 

DETROIT,  Ml 

Monday,  Sept.  10 

:  Monday,  Sept.  1 7 

:  Wednesday,  Sept.  19 

Tuesday,  Sept.  25 

NEW  YORK,  NY 

\  COLUMBIA,  MD 

DENVER,  CO 

WOODLAND  HILLS,  CA 

Tuesday  ,  Sept.  1 1 

:  Monday,  Sept.  1 7 

:  Tuesday,  Sept.  25 

Monday,  Oct.  1 

CALL  1-800-562-7469  FOR  MORE  INFORMATION  ON  EXHIBITING  OR  ATTENDING! 


Or  check  out  www.naacpcareerfair.com  to  find  out  more  about 
these  events  and  other  career  opportunities. 


The  NAACPDiversity  Career  Fair  is  produced  and  managed  by  Shomex 

2601  Ocean  Park  Boulevard,  Suite  200  •  Santa  Monica,  CA  90405  •  (310)  450-8831 
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_  Network  World,  Inc. 

1 18  Turnpike  Road,  Southborough,  MA  01772 
Phone:  (508)  460-3333 

TO  SEND  E-MAIL  TO  NWW  STAFF 

firstnamejastname@nww.com 

Evdee  TTubeault,  CEO/Publisher 
John  Gallant,  President/Editorial  Director 
Eleni  Brisbois.  Administrative  Planning  Manager 

FINANCE 

Mary  Fanning,  Vice  President  Finance 
Paul  Mercer,  Finance  Manager 
Mary  Kaye  Newton,  Billing/AP  Coordinator 
HUMAN  RESOURCES/BUSINESS  SERVICES 
Monica  Brunaccini,  V.  P.  Human  Resources/Business  Services 
Elizabeth  Price,  Human  Resources  Manager 
Eric  Cormier,  Human  Resources  Associate  Rep. 

Frank  Coelho,  Business  Services  Manager 
LisaThompson,  Business  Services  Administrator 
Mark  Anderson,  Business  Services  Supervisor 
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Protect  your  company 

A  slumping  economy  means  more  layoffs  and  disgruntled 
employees.  And  that  means  network  and  security  administrators 
need  to  protect  their  companies  more  than  ever.  Here  are  some 
steps  to  take  when  laying  off  an  employee,  especially  an  IS 
worker: 


Court, 

continued  from  page  1 

Bruce  Townsend,  special  agent 
in  charge  for  the  Secret  Service’s 
financial  crimes  division.  Super¬ 
visory  Special  Agent  Jim  Hegarty 
of  the  FBI’s  computer  crime 
squad  says  it  is  currently  investi¬ 
gating  four  such  cases  in  New 
England  alone. 

“Eighty  percent  of  the  cases 
we’re  seeing  are  from  the  inside 
or  people  who  were  formerly 
with  the  organization,”  Town¬ 
send  says.  “When  you  conduct 
an  investigation,  that’s  one  of 
the  first  areas  you  need  to  look 
at  now. . . .  It’s  not  if  you’re  going 
to  be  attacked,  but  when  you’re 
going  to  be  attacked.” 

Kenneth  vanWyk,  CTO  for 
ParaProtect  Services,  a  security 
portal  in  Centreville,  Va.,  says 
95%  of  the  break-ins  they’re 
called  in  to  handle  are  insider- 
based. 

“An  insider  attack  really  gets 
the  attention  of  the  company 
because  an  insider  has  access  to 
all  the  critical  systems,”  vanWyk 
says.“If  they  want  to  do  damage, 
they  know  how. . .  .A  company’s 
decision  to  protect  itself  isn’t 
just  a  technology  decision.  It’s  a 
business  decision.” 

Grocer  victimized 

In  the  Miami  case,  Herbert 
Pierre-Louis,  a  hardware  engi¬ 
neer  who  worked  in  the  IS 
department  at  Purity  Wholesale 
Grocers,  is  being  charged  with 
computer  sabotage  for  the  June 
18, 1998,  incident  at  the  $1.5  bil¬ 
lion  national  grocery  outlet 
based  in  Boca  Raton,  Fla.  Assis¬ 
tant  U.S.  Attorney  Richard 
Boscovich  says  the  damage  was 
well  over  the  $5,000  waterline 
that  is  one  of  the  key  factors 
making  this  a  federal  crime. 

Boscovich  will  not  release 
information  until  the  trial  gets 
under  way  on  how  the  crime 
allegedly  was  perpetrated  or 
why  Pierre-Louis  would  want  to 
attack  his  own  employer. 

The  FBI’s  Hegarty  says  this  is 
a  time  when  companies  should 
be  particularly  cautious. 

“In  light  of  the  economy  and 
the  downturn  and  layoffs,  com¬ 
panies  should  pay  attention  to 
this,"  he  says.  “These  are  not  iso¬ 
lated  events. There's  an  awful  lot 
of  trust  they  have  in  computer 
people  in  these  companies.” 

That’s  a  lesson  Omega  Engi¬ 
neering’s  Bridgeport,  N.J.,  manu¬ 
facturing  plant  learned  the  hard 
way.  In  the  summer  of  1996,  a 
software  time  bomb  went  off  in 
the  plant’s  computer  network. 


systematically  eradicating  all  the 
programs  that  ran  the  compa¬ 
ny’s  manufacturing  operations. 
Exacerbating  the  problem, 
Omega’s  only  back-up  tape  was 
missing.  The  manufacturing 
plant  was  no  longer  able  to  man¬ 
ufacture.  Company  executives, 
during  last  year’s  trial  in  U.S.  Dis¬ 
trict  Court  in  Newark,  N.J.,  said 
the  company  had  yet  to  fully 
recover.  The  incident  caused 
$12  million  in  damages  and  led 
to  Omega  losing  its  footing  in 
the  high-tech  instrument  and 
measurement  market  and  the 
eventual  layoff  of  80  employees. 

Omega’s  former  network 
administrator,  Tim  Lloyd  of  Wil¬ 
mington,  Del.,  was  charged  with 
sabotaging  the  network  he 
helped  build.  He  was  found 
guilty  after  a  four-week  trial.The 
judge  later  set  that  verdict  aside 
after  a  juror  told  the  court  she 
was  unsure  whether  a  piece  of 
information  she  had  heard  on 
television  news  had  been  fac¬ 
tored  into  her  verdict. 

The  government  appealed 
the  judge’s  ruling,  taking  its 
case  in  front  of  the  Third  Circuit 
Court  of  Appeals  in  Philadel¬ 
phia  this  past  April.  A  ruling  is 
pending. 

Lloyd  was  charged  under  a 
relatively  new  statute  that 
made  computer  sabotage  a  fed¬ 
eral  offense  if  it  affected  a  com¬ 
puter  used  in  interstate  com¬ 
merce  and  caused  more  than 
$5,000  worth  of  damage  to  the 
company  over  a  12-month 
span.  That  was  the  first  federal 
criminal  prosecution  of  com¬ 
puter  sabotage. 

Similar  cases  prosecuted 

Now  that  same  statute  is 
being  used  in  three  other  cases. 

One  of  those  cases  charges 
network  consultant  Christopher 
Sandusky  with  sabotaging  the 
computer  network  at  one  of  his 
clients,  Steinberg  Diagnostic 
Medical  Imaging  in  Las  Vegas. 
Sandusky  is  charged  with  three 
counts  of  network  intrusion  for 
changing  passwords  in  the  net¬ 
work,  which  locked  administra¬ 
tors  out  of  their  own  system. 
Assistant  U.S.  Attorney  Matthew 
Parrella  notes  in  the  indictment 
that  Sandusky  allegedly  hacked 
the  system  on  three  different 
days  between  late  February  and 
early  March  of  this  year. 

Sandusky,  working  with  a 
partner,  had  been  hired  as  a  sub¬ 
contractor  by  the  medical  imag¬ 
ing  company,  according  to 
sources  close  to  the  investiga¬ 
tion.  Both  the  deal  and  the  part¬ 
nership  fell  through,  and  San¬ 


dusky’s  partner  went  to  work 
for  Steinberg  Diagnostic  as  a  sys¬ 
tem  administrator.  The  govern¬ 
ment  contends  that  Sandusky 
attacked  the  system  to  gain 
revenge. 

The  damage  had  to  have 
added  up  to  at  least  $5,000  for 
Sandusky  to  be  charged  with  a 
federal  offense.  Further  informa¬ 
tion  won’t  be  released  until  the 
trial,  which  is  slated  to  start  Oct. 
15  in  U.S.  District  Court  in  Las 
Vegas. 

Earlier  this  summer,  a  former 
help  desk  worker  at  Bricsnet,  a 
Portsmouth,  N.H.,  application 
service  provider  for  the  con¬ 
struction  and  design  industry, 
was  found  guilty  on  federal 
charges  of  network  sabotage  for 
hacking  into  Bricsnet’s  system 
after  being  fired  last  fall.  Patrick 
See  Court,  page  76 


•  After  terminating  an  employee,  do 
not  give  him  any  access  to  his  desk, 
his  PC,  his  laptop  or  any  company- 
owned  handheld  devices. 

•  Immediately  terminate  his  e-mail 
account,  password  and  logon  name. 

•  Change  everyone's  password  in  the 
company  at  the  same  time  so  they 
can't  be  used  to  break  back  into  the 
system. 

•  Change  passcodes  for  physical  locks 
in  the  building,  especially  those  for 
the  computer  rooms. 

•  Conduct  a  new  backup  immediately. 


•  Verify  that  your  back-up  tapes  are 
where  they  should  be  and  are 
functioning  properly. 

•  Starting  on  the  day  of  the 
termination,  lock  down  every  system 
to  which  the  worker  had  access. 

•  Go  up  on  the  system  and  check  user 
names  and  passwords,  looking  for 
anything  unusual. 

•  Strengthen  your  intrusion  detection 
system. 

•  Set  a  trip  wire  —  software  that 
alerts  the  administrator  to  system 
anomalies,  such  as  the  size  of  a  file 
changing. 


GHOST  ACCOUNTS:  AN  OPEN 
DOOR  TO  NETWORK  SABOTAGE 


t's  a  scary  indicator  of  a  spiraling  economy  that  through  the  first  six  months  of  this  year  nearly 

1.1  million  workers  were  laid  off,  according  to  the  U.S  Department  of  Labor. 

Even  scarier  is  the  question  of  how  many  of  those  workers  still  have  active  accounts  on  the 
networks  of  their  former  employers. 

So-called  ghost  accounts,  those  not  closed  when  workers  leave,  can  include  access  to  main¬ 
frames,  databases,  file  servers,  intranets  and  e-mail.  There  are  also  remote  access  holes  with 
VPN  passwords  and  dial-in  accounts.  All  open  "back  doors"  into  a  network. 

A  recent  series  of  high-profile  network  sabotage  cases  show  that  vengeful  employees  can 
wreak  high-tech  havoc. 

"Disgruntled  employees  are  a  significant  threat,"  says  Larry  Rogers,  senior  member  of  the 
technical  staff  at  Computer  Emergency  Response  Team  Coordination  Center.  Security  experts 
recommend  a  combination  of  procedures,  policies  and  automation  to  combat  the  threat. 

"We  have  an  application  that  notifies  all  departments  when  an  employee  leaves,  puts  the 
user's  passwords  in  a  deny-access  mode  and  quarantines  their  files,"  says  one  network  adminis¬ 
trator  for  a  global  distribution  company  who  requested  anonymity.  "Part  of  the  process  is  manual, 
and  we  are  evaluating  ways  to  automate  that." 

Automation  is  key  and  is  being  made  available  in  a  class  of  products  known  as  provisioning 
software,  which  can  automatically  activate  and  deactivate  user  accounts. 

"If  you  are  a  CIO  and  are  currently  using  a  manual  process,  fundamentally  you  have  no  way  to 
know  the  process  [of  deprovisioning]  worked.  With  provisioning  software  that  is  the  opposite. 

You  know  that  the  process  was  completed,"  says  Mike  Neuenschwander,  an  analyst  with  The 
Burton  Group. 

Just  last  week  Access360,  Novell  and  Waveset  Technologies  announced  provisioning  prod¬ 
ucts.  Business  Layers  also  has  a  product  called  eProvision  Day  One. 

Access  360  released  Version  4.0  of  its  EnRole  provisioning  software,  which  is  now  integrated 
with  corporate  directories  to  centralize  user  account  information.  Novell  released  its  Employee 
Provisioning  System,  which  is  intended  to  create  a  single  user  identity  across  a  corporate  net¬ 
work.  Waveset  Technologies  is  offering  for  free  its  Inactive  Account  Scanner,  which  ferrets  out 
dormant  accounts. 

However,  the  process  must  include  social  engineering,  Rogers  says.  That  means  teaching 
employees  not  to  share  passwords  and  administrators  not  to  reactivate  closed  accounts. 

Rogers  recalls  one  case  where  a  former  Coast  Guard  employee  was  able  to  hack  into  a  data¬ 
base  using  a  password  given  to  her  by  an  unsuspecting  co-worker. 

The  result:  A  bill  of  $40,000  and  1 ,800  staff  hours  to  repair  the  damage. 

—  John  Fontana 
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Court, 

continued  from  page  75 

McKenna  of  Hampton,  N.H., 
pleaded  guilty  to  breaking  into 
the  system  twice  using  a  super¬ 
visor's  password  —  once  the 
night  he  was  fired  and  again  the 
next  morning  —  to  delete  a 
total  of  675  files,  change  user 
access  levels  and  send  e-mails  to 
Bricsnet  clients  saying  the  com¬ 
pany’s  project  center  would  be 
temporarily  or  permanently 
shut  down. 

The  attack,  which  was  discov¬ 
ered  by  another  Bricsnet 
employee  the  next  day,  cost  the 
company  $13,614  in  in-house 
repair  costs,  according  to  Arnold 
Huftalen,  Assistant  U.S.  Attorney 
for  the  District  of  New  Hamp¬ 
shire.  Some  of  the  destroyed 
files  could  not  be  restored. 

“His  activities  were  meant  to 
cause  as  much  damage  as  possi¬ 
ble.  It  was  malicious,”  says  the 
FBI’s  Hegarty,  who  says  putting 


Love, 

continued  from  page  1 

1 .  An  ounce  of  kindness 

As  they  say,  an  ounce  of  kind¬ 
ness  will  get  you  a  pound  of 
love.  Dave,  a  corporate  commu¬ 
nications  director  at  an  IT  stor¬ 
age  company,  says  his  employ¬ 
er’s  “crack  IT  staff”  is  incredibly 
responsive.  “More  importantly, 
they’re  even  nice  about  the  IT 
problems  I  cause,”  he  says. 

2.  Going  the  extra  mile 

Sometimes  it’s  the  little 
things  that  count  most,  like  tak¬ 
ing  that  extra  step  to  help  a 
user.  Amy,  an  editor  in  Need¬ 
ham,  Mass.,  who  works  from 
home  part-time,  says  her  IT  staff 
helped  her  configure  her  home 
computer  for  DSL.  “I  saved 
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Network  crime  spree 


The  annual  Computer  Crime  and  Security  Survey,  jointly  done 
by  the  FBI  and  the  Computer  Security  Institute,  shows  network 
hreak-ins  are  increasing. 


40%  of  respondents 

reported  outside 
system  break-ins. 
That  number  is  up 
from  20%  in  1997. 


64%  acknowledged 

financial  losses  due 
to  computer 
breaches. 


85%  reported 

security  breaches 
within  the  last  12 
months. 


a  financial  number  on  the  loss 
is  misleading.  “How  do  you 
quantify'  the  impact  when  cus¬ 
tomers  receive  these  kind  of 
damaging  e-mails?  You  can’t 
put  a  dollar  on  that.  Would  a 
company  pay  $13,000  not  to 
have  that  happen?” 

William  Tucker,  vice  president 


money  because  I  didn’t  have  to 
pay  for  someone  to  come  in  and 
install  it,”  she  says. 

3.  Lots  of  smarts 

Evan,  a  communications  pro¬ 
fessional  from  New  Jersey, 
appreciates  the  know-how  of 
his  company’s  IT  team.  He  says 
skill  levels  are  improving  as  the 
IT  department  becomes  more 
familiar  with  Internet  technol¬ 
ogy.  "The  depth  of  knowledge 
has  increased  exponentially,  and 
the  response  time  when  prob¬ 
lems  arise  is  much  better.  IT 
issues  seem  to  be  resolved  on 
the  first  visit,  or  with  the  first 
phone  call,”  he  says. 

4.  Grace  under  pressure 

Many  corporate  IT  depart¬ 
ments  are  servicing  companies 
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of  Bricsnet,  says  administrators 
took  basic  security  precautions 
after  firing  McKenna,  who  had 
broken  company  rules  against 
moonlighting  and  other  activi- 
ties.Tucker  says  they  terminated 
McKenna’s  password,  logon 
and  user  accounts.  They  also 
changed  the  code  on  their 


whose  business  is  IT.  That  puts 
pressure  on  the  internal  IT  folks 
to  perform.  Dave,  director  of 
marketing  at  an  IT  services  firm, 
puts  it  this  way:  “When  your 
company  has  hundreds  of  cus¬ 
tomers  depending  on  you  to 
deliver  their  IT  infrastructure, 
your  internal  IT  department  is 
held  up  to  very  high  standards. 
It’s  like  being  a  doctor  whose 
patients  are  other  doctors.  I 
have  great  respect  for  our  IT 
folks,  especially  given  what  our 
company  does.” 

5.  Quick  on  the  uptake 

While  some  users  complain 
about  slow  response  time,  there 
are  many  others  who  praise  IT 
for  their  speed  in  resolving 
problems.  Neal,  corporate  devel¬ 
opment  manager  at  an  applica¬ 
tion  service  provider,  says  his 
firm’s  IT  staff  takes  its  cue  from 
the  company’s  customer  sup¬ 
port  center. 

“Since  they  receive  notice  of 
the  exact  issue  from  the  . . .  ser¬ 
vice  center  [instead  of  from  me 
directly] ,  they  are  able  to  come 
right  in  and  fix  the  problem, 
instead  of  the  trial-and-error 
process  usually  necessary  to 
identify  the  issue,”  he  says. 

Lisa,  a  colleague,  adds:  “When 
problems  arise  with  e-mail  or 
any  application,  I  call  the  . . .  ser¬ 
vice  center.They  either  walk  me 
through  the  steps  to  fix  it 
myself  or  someone  is  at  my  desk 
in  minutes.  .  .  .  The  whole 
process  is  quick  and  painless, 
and  I  get  on  with  my  day.” 


building’s  keypad  and  escorted 
McKenna  from  the  building. 

“There  was  no  sense  of  fore¬ 
boding,”  Tucker  says.  “These 
steps  were  routine  for  us.  .  .  . 
Certainly,  we  had  an  extensive 
[security]  system  in  place  but 
we  were  always  thinking  of  out¬ 
side  intrusion.” 

Tucker  says  the  incident, 
which  the  FBI  traced  back  to 
McKenna  in  less  than  a  week, 
has  changed  the  way  the  com¬ 
pany  evaluates  its  security 
needs.  Since  the  attack,  Bricsnet 
has  re-evaluated  its  security  sys¬ 
tem  and  limited  network  access. 

“We  re  acutely  aware  of  the 
damage  a  disgruntled  employee 
can  cause,”  he  says.  “I  think  peo¬ 
ple  took  it  personally.  For  some¬ 
one  you’ve  worked  with  on  a 
daily  basis,  it  certainly  was  an 
element  of  betrayal.”  \A 
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6.  Cutting  edge 

Users  give  IT  a  nod  for 
installing  devices  and  network 
equipment  that  makes  their 
work  easier.  One  user,  for  exam¬ 
ple,  crowed  that  all  employees 
have  laptops  and  docking  sta¬ 
tions  that  can  be  hooked  up 
anywhere  in  the  building. 

7.  Knight  in  shining  armor 

When  a  computer  crashes, 
end  users  don’t  care  what 
caused  it.  They  just  want  their 
files  back.  That’s  where  IT 
comes  in  to  save  the  day. 

Laura,  a  communications 
director  at  an  application  ser¬ 
vice  provider,  recalls  losing 
her  entire  electronic  Rolodex 
of  media  contacts.  “They  were 
able  to  walk  me  through 
retrieving  it  using  some  cool 
tool  called  Previo.  Previo 
automatically  backs  up  your 
hard  drive  so  there’s  no  for¬ 
getting  at  the  end  of  the 
week,  day,  etc.  Very  smart  — 
and  it  saves  the  IT  depart¬ 
ment  and  me,  the  end  user, 
from  hours  of  sorting  through 
files  and  backups.” 

8.  Knowledge  sharing 

End  users  praise  IT  for  taking 
the  time  to  explain  how  to  fix  a 
problem  so  that  the  next  time  it 
occurs  the  user  can  fix  it  him¬ 
self.  That’s  a  plus  for  the  end 
user  and  IT,  since  it  saves  time 
and  trouble  on  both  ends.  As 
one  user  says,  “Now  that  they 
educated  me  on  how  to  restore 
items,  I  can  do  it  myself.”  3 


CTMP, 

continued  from  page  8 

edly  were  abusing  the  CTMP 
system. 

“Some  channel  partners 
were  using  the  program  to  gain 
an  unfair  discount  advantage 
over  those  partners  who  set 
preference  for  Cisco  solutions,” 
says  Tom  Mitchell,  senior  vice 
president  of  Worldwide  Chan¬ 
nels  at  Cisco.  “This  is  not  con¬ 
sistent  with  otir  current  chan¬ 
nel  strategy  to  focus  on 
value-added  service  instead  of 
price.” 

Some  Cisco  customers,  who 
received  the  Justice  e-mail  last 
week,  scrambled  to  purchase 
what  Cisco  products  they 
could  before  the  prede¬ 
termined  discounts  were 
scrapped. 

“We  have  been  informed 
that  the  trade-in  program  is 
ending,”  says  Raymond  Santana, 
network  engineer  at  the  Uni¬ 
versity  of  California,  Davis,  Med¬ 
ical  Center  in  Sacramento.  “It 
means  we  will  have  to  acceler¬ 
ate  our  purchases  to  take 
advantage  of  the  trade-in.” 

Justice’s  e-mail  also  said 
Cisco  will  no  longer  collect  or 
retrieve  competitive  equip¬ 
ment  that’s  replaced  with 
Cisco  gear. 

“Rather  than  focus  on  the 
logistics  of  collection  and 
destruction  of  our  competi¬ 
tors’  legacy  products,  we  will 
apply  these  efforts  into  other 
competitive  sales  programs 
and  into  further  enhancing  the 
Cisco  value  proposition,”  Jus¬ 
tice  wrote. 

One  reseller  corroborated 
Cisco’s  claim  that  the  pro¬ 
gram  was  being  abused  by 
the  channel. 

“I  heard  there  were  many 
abuses  of  this  program  and  that 
it  cost  Cisco  a  lot  of  money  to 
verify  receipt  of  the  ‘Vendor  X’ 
equipment  and  to  eventually 
dispose  of  it,”  says  Joe  Wenker,  a 
principal  engineer  at  Qwest 
Communications.'It  also  seems 
to  make  sense  to  not  [give  cus¬ 
tomers  incentives]  to  replace 
gear  from  vendors  that  are  no 
longer  in  business  . . .  say  3Com. 
I  believe  Cisco  will  still  be 
aggressive  on  price  when  in 
competitive  situations,  but  it 
may  cost  them  less  to  just  dis¬ 
count  their  equipment  rather 
than  discount  and  then  collect 
other  vendors’  equipment.” 

CTMP  was  created  three 
years  ago  to  accelerate  adop¬ 
tion  of  Cisco  products  by  com¬ 
panies  and  service  providers.  □ 
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Waiting  to  ask  storage 
questions  could  be 
hazardous  to  your  busine 


■  Explore  the  pros  and  cons  of  technologies 
i  such  as  SAN,  NAS,  Fibre  Channel,  SCSI, 
f  InfiniBand,  storage  over  IP  and  more. 

Register  for  Network  World’s  Storage 
Town  Meeting:  Building  A  Superior 
Infrastructure.  And  get  the  answers  you 
need  now — before  your  storage  infrastruc¬ 
ture  becomes  hazardous  to  your  business. 


Will  e-business  continue  to  fuel  the 
storage  crisis?” 

Whats  the  prognosis  for  Fibre  Channel- 
based  SANs?” 

When  should  I  consider  iSCSI?” 

Where  can  I  turn  for  storage 
management  advice?” 

Should  storage  be  centralized 
or  distributed?” 


Get  answers  at  Network  World's 
Storage  Town  Meeting. 

As  online  storage  demands  surge,  you  face  a  flood  of 
questions  about  how  to  build  an  infrastructure  strong  enough 
to  handle  the  data  streaming  into  your  enterprise. 

There’s  no  better  place  to  get  answers  than  Network  World’s 
Storage  Town  Meeting:  Building  A  Superior  Infrastructure. 

Attend  this  FREE,  interactive,  one-day  event  and  you’ll: 

Get  straightforward  answers  to  your  hard¬ 
hitting  questions  from  storage  experts  Steve 
Duplessie,  founder  of  Enterprise  Storage 
Group  and  Sandra  Gittlen,  events  editor  at 
Network  World. 


■  Meet  face-to-face  with  world-class  storage 
vendors  and  compare  the  best  solutions  on 
the  market. 


STORAGE  TOWN  MEETING: 

Building  a  Superior  Infrastructure 

A  Network  World  Event 

WASHINGTON,  D.C. 

DENVER,  CO 

September  25 

October  4 

NEW  YORK,  NY 

SAN  FRANCISCO,  CA 

September  26 

October  9 

BOSTON,  MA 

SAN  JOSE,  CA 

October  2 

October  10 

CHICAGO,  IL 

IRVINE,  CA 

October  3 

October  1 1 

Register  today  at  www.networkworld.com/seminars/storage  or  call  800-643-4668. 


PLATINUM  PRESENTING  SPONSORS: 


BLUE-ARC 


GOLD  EXHIBITING  SPONSOR: 


Cisco  Systems 
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To  become  a  sponsor  of  this  event,  please  contact  Andrea  D’Amato  at  508-490-6520  or  adamato@nww.com. 
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Where  technology  leaders  answer  to  you. 
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PC  ignorance  —  a  big  mistake 


sides  in  last  week’s  column  (see 
www.nwfusion.com,  DocFinder: 
5733)  have  generated  a  lot  of 
e-mail. 

“In  New  Zealand,  we  re  com¬ 
fortable  calling  this  decade  the 
‘noughties’  just  as  we  had  the 
eighties  and  the  nineties  before 
it.”  —  reader  Geoff  Pooch  from  — 
guess  where?  —  New  Zealand. 

“And  while  we  are  on  the  sub¬ 
ject,  it  really  annoys  me  that 
everyone  says  ‘two  thousand  and 
one.’  Surely  if  we  are  consistent 
with  the  last  century,  it’s  twenty- 
oh-one.’  I  will  continue  my  per¬ 
sonal  crusade  on  this  one.”  — 
reader  David  Lowe  who,  curi¬ 
ously,  is  also  from  New  Zealand. 

This  shows  that  it  is  all  a  ques¬ 
tion  of  interpretation.  Whether  you 
want  to  say  the  “aughties”  or  the 
“noughties”  or  “two 
thousand  and  one” 
instead  of  “twenty-oh- 
one,”  the  final  say  will 
be  whatever  becomes 
the  accepted  standard 

—  the  cultural  norm 

—  at  least  where  the 
naming  of  things  is 
concemed.And  until 
we’re  a  little  further 
into  this  decade,  we 
won’t  know  what  the 
norm  will  be. . . . 


The  other,  rather 

MARK  more  meaty  issue  that  arose  out  of 

GIBBS  the  column  was  outlined  by  Saro 

Marcarian:“Your  points  regarding 
security  are  valid.  Your  points 
regarding  poorly  coded  viruses  are 
valid.  You  did,  however,  miss  a  great 
opportunity  to  alienate  a  bunch  of 
people  with  the  truth  on  why  the 
current  crop  of  poorly  written 
viruses  are  so  successful.” 

Saro,  you  are  so  right  —  I  did 
miss  an  opportunity  to  alienate, 
infuriate  and  offend  a  bunch  of 
people.  So  here  goes:The  truth  of 
why  the  current  crop  of  poorly 
written  viruses  are  so  successful 
is  simple  —  most  users  are  work¬ 
ing  on  autopilot. They  use  their 
computers  as  if  they  didn’t  have 
to  think  about  what  they  are 
doing  so  they  open  attachments 
and  run  programs  without  any 
thought  of  consequences. This  is, 
of  course,  a  big  mistake. 

Their  blind  faith  in  computers 
is  a  fine  example  of  how  the  com¬ 
puter  industry,  aided  and  abetted 


by  Hollywood  and  mainstream 
journalism,  has  let  the  myth  of  the 
“electronic  brain”  characterize  the 
PC  just  as  much  as  it  characterized 
the  mainframe. 

The  curious  thing  is  that  the 
average  person  knows  full  well 
that  PCs  can’t  be  trusted  and 
won’t  help  them  to  do  their  work 
beyond  some  arbitrary  and  vari¬ 
able  point  that  depends  on  what 
applications  they  have  installed, 
what  they  have  done  with  then- 
computers  in  the  last  24  hours 
and  which  way  the  wind  is  blow¬ 
ing.  Even  so,  the  old  adage  “you 
can  lead  a  horse  to  water  but  you 
can’t  make  it  drink”  applies. 

The  majority  of  people  simply 
won’t  learn  about  PCs  and  will  be 
hugely  offended  when  their  PCs 
don’t  behave  as  they  expect.  How 
often  has  your  mother,  father  or 
spouse  complained  bitterly  that  yet 
again  there  is  something  wrong 
with  their  computer  and  how 
often  have  you,  after  hours  of  dis¬ 
cussion  and  interrogation,  discov¬ 
ered  that  they  have  the  shift  lock 
or  scroll  lock  on  (even  though  at 
the  beginning  of  the  conversation 
they  vehemently  denied  it)? 

The  problem  is  that  there’s  no 
vocabulary  that  can  efficiently 
and  easily  enable  naive  users  to 
articulate  their  problems  with 
computer  hardware  and  software 
when  they  need  to.  While  we 
might  ascribe  this  lack  of  words 
to  profound  ignorance  on  the  end 
user’s  part  (equivalent  to  trying  to 
drive  a  car  without  understanding 
what  role  gasoline,  turning  indica¬ 
tors  and  air  in  the  tires  play),  the 
real  fault  lies  with  PC  operating 
systems  that,  at  best,  are  focused 
on  the  user  having  a  “good  time” 
(in  other  words,  lotsa  chrome  and 
features)  but  offer  little  help  that 
goes  beyond  the  absolute  basics. 

The  fact  is  that  the  great  un¬ 
washed  —  your  users,  colleagues, 
clients,  co-workers,  spouse  and 
family  (unless  they  are  in  the  com¬ 
puter  business)  —  are,  in  the  main, 
totally  untrainable  when  it  comes 
to  PCs.  Until  the  industry  produces 
a  better  mousetrap,  or  at  least,  a 
better  user  interface  and  more 
user-friendly  services,  PC  igno¬ 
rance  can  only  grow  deeper. 

Show  you  re  smart  by  writing 
to  nwcolumn@gibbs.com. 


As  online  merchants  learn  from  the  dot¬ 
com  postmortems  and  apply  those  lessons  to 
improve  their  e-commerce  sites,  do  you  find 
yourself  buying  more  stuff  —  and  more 
expensive  stuff  —  over  the  Internet? 

Me  neither. 

Extrapolating  a  trend  based  on  limited 
personal  experience  is  always  risky,  but  it's 
tough  to  ignore  the  impression  that  online 
shopping  —  more  often  than  not  —  fails  to 
beget  online  buying.  Virtual  window-shop¬ 
ping  is  what  we're  talking  about,  and  the 
practice  cannot  be  good  news  for  com¬ 
panies  that  rely  solely  on  online  sales  for 
survival. 

On  the  other  hand,  e-window-shopping  may  be  an  underestimated 
asset  for  companies  with  a  presence  in  both  the  physical  and  virtual 
worlds,  according  to  new  research  from  Jupiter  Media  Metrix. 

Jupiter  maintains  that  offline  purchases  influenced  by  online 
research  will  constitute  almost  two-thirds  of  the  benefits  that  a  tradi¬ 
tional  merchant  derives  from  its  Web  site.  Accounting  for  this  fact 
will  boost  such  a  site's  return  on  investment  by  65%,  the  researchers 
contend. 

Whether  those  figures  hold  up  in  the  real  world  is  anyone's  guess, 
but  the  general  description  of  an  online  shopper/offline  buyerfitthis 
particular  consumer  as  he  recently  went  about  the  unpleasant  task  of 
purchasing  a  minivan. 

Mrs.  Buzz  and  I  had  determined  early  on  that  we  wanted  a  Dodge 
Grand  Caravan.  The  only  unanswered  question  was  who  would  win  our 
business.  Seeing  as  I  write  about  the  Internet  for  a  living,  it  seemed 
obligatory  that  I  at  least  try  to  get  the  deal  done  through  the  Web. 

Let's  just  say  the  experience  was  less  than  satisfying. 

One  site  promised  to  hook  me  up  with  a  dealer  in  my  area  who  could 
provide  the  specified  vehicle  and  quote  me  a  competitive  price.  In  my 
area  turned  out  to  be  65  miles  away ...  in  a  neighboring  state. 

Another  site  did  a  swell  job  of  fielding  my  request  for  information 
and  forwarding  it  to  a  nearby  dealer  who  the  site  claimed  would  have 
the  desired  Dodge.  The  dealer  immediately  sent  an  e-mail  confirming 
my  inquiry _ And  1  never  heard  from  them  again. 

A  third  site  promised  to  convert  50,000  of  my  American  Express 
Membership  Rewards  points  into  a  $1,000  certificate  that  could  be 
applied  to  the  minivan  purchase,  but  the  fine  print  was  far  too  complex 
for  the  average  trade  journalist  to  understand.  And  the  site's  request 
for  a  $300  deposit  simply  scared  this  potential  buyer  away. 

Frustrated,  I  went  to  the  official  Dodge  Web  site  —  www.4adodge. 
com  —  found  a  list  of  dealers,  dialed  a  round  of  old-fashioned  phone 
calls,  received  a  handful  of  verbal  quotes,  then  dragged  my  butt  down 
to  the  low  bidder  for  hand-to-hand  combat. 

The  dealer  experience  was  still  the  dealer  experience,  but  at  least  I 
had  stopped  spinning  my  wheels. 


PAUL 

MCNAMARA 


A  Buzz  reader  who  says  my  recent  recommendation  of  www.road 
tospringfield.com  "nearly  got  me  fired  at  work,"  offers  this  tip  for  those 
who  believe  the  Internet  can  be  an  instrument  of  good  deeds,  as  well 
as  frivolous  and  evil  ones: 

"I'd  like  to  let  you  in  on  a  little  company  run  by  a  friend  of  mine 
here  in  Homer,  Alaska,"  Ben  Stuart  writes.  "It's  www.generous 
adventures.com  and  it  is  the  only  all-travel  benefit  auction  on  the 
Internet  right  now.  It  receives  donated  adventure  and  accommoda¬ 
tion  trips  from  around  the  world  and  puts  them  up  to  bid  on  the  site. 

At  the  close  of  the  auction  the  proceeds  go  to  various  environmental 
organizations  such  as  Robert  F.  Kennedy's  Waterkeeper  Alliance,  the 
Natural  Resources  Defense  Council  and  the  World  Wildlife  Fund." 

Land  a  swell  trip  at  a  decent  price  while  doing  your  bit  for  the 
environment? 

Beats  shopping  for  a  minivan. 

Comments,  suggestions  and  "What  l  did  on  my  summer 
vacation” essays  should  be  sent  to  buzz@nww.com. 
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"  More  robust  and  faster 
than  its  competitors..." 

ENT  Magazine 

"Ridiculously  easy 
to  use..." 

SC  Info  Security  Magazine 

"Best  blend  ot  features 
and  security..." 

Computer  Reseller  News,  Editors’  Choice 
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Remote  Control  Software 


Tell  pcAnywhere  to  go  fly  a  kite. 


,TM 


NetOp 

pcAnywhere 

LapLink 


%  of 

standalone 


Reported  by  Computer  Reseller  News 


Sk 


NetOp  and  the  red  kite  are  registered  trademarks  of  Danware  Data  A/S. 
Other  brand  and  product  names  are  trademarks  of  their  respective  holders. 
2001  Copyright  Danware  Data  A/S.  All  rights  reserved. 


NetOp.  Moving  expertise  -  not  people 

NetOp  Remote  Control  is  the  award-winning  solution  taking 
enterprise  management  and  support  desk  initiatives  to  new 
heights.  NetOp  is  so  fast  and  easy  to  use  you  will  feel  like  you 
are  sitting  right  in  front  of  the  distant  PC.  NetOp’s  advanced 
security,  request  help  options,  type-and-talk  communication,  and 
crash  recovery  make  supporting  your  network  and  users  a  breeze. 


NetOp  enables  you  to  access  remote  PCs  and  servers  via  the 
Internet,  modem  or  networks  and  works  on  every  PC  in  your 
organization:  Windows  2000,  NT,  98/95/Me,  legacy  Windows 
3.1  X  and  DOS  machines  and  even  OS/2  systems. 


So,  if  you  have  problems  getting  pcAnywhere,  LapLink  or 
any  of  those  bundled  remote  products  off  the  ground,  go  to 
www.CrossTecCorp.com  or  call 
1  -800-675-0729  and  take  NetOp 
for  a  free  test  flight  today. 


NetOo 4 

Download  your  FREE  fully-functional  ^ 

evaluation  copy  at  www.CrossTecCorp.com 
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800-675-0729 
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FOR  TODAY 

Delicious  eBusiness  Infrastructure  Management  Solutions 


NO  MATTER  WHAT 
YOUR  INFRASTRUCTURE 
MANAGEMENT  NEEDS  ARE, 

WE  HAVE  SOLUTIONS 
THAT  WILL  SATISFY 
YOUR  APPETITE. 


Open  24  hours. 
Every  day. 

ENSURING  OPTIMAL 
DELIVERY  OF  SERVICE. 


CALL  YOUR  CA 
SALES  REPRESENTATIVE 
ORVisrrcA.coM 
FOR  OUR  SPECIALS. 


2  Network  &  System  Management  Solutions 


Chef 

Network  and  Systems  Management . . . Market  Price 

Service  Level  Management  . - . . . ..Market  Price 

Performance  Management  . . . . .  Market  Price 

Advanced  Network  Operations  . . . . . . -  Market  Price 

Automated  Operations  Management  Entrees 


AutoSys*  Job  Management  ........ 

Output  Management . . 

Data  Transport  . . . . . 


. Market  Price 

. . . Market  Price 

. . . Market  Price 


Hot 


IT  Resource  Management  Solutions 


Asset  Management  . . . . . . . .  Market  Price 

Software  Delivery  . . . . . - . Market  Price 

Remote  Control  . . . Market  Price 

Service  Desk  . . . Market  Price 

Triple  Decker 

Database  Performance  Management . 

Database  Administration . . 

Database  Backup  and  Recovery - - 

Web  Infrastructure  Solutions  from  The  Grill 


. . Market  Price 

. .  Market  Price 

. Market  Price 


Management  for  WebLogic . 

Management  for  WebSphere  ....... 

Management  for  Web  Server  — ... 
Management  for  MQ  Series . . 


. ,< . Market  Price 

. . . . Market  Price 

. . . . . .Market  Price 

. . . ...  Market  Price 


Tasty 


Application  Management 


Application  Management  for  ERP . — . Market  Price 

♦  Management  for  SAP  ♦  Management  for  PeopleSoft 

Application  Management  for  GroupWare . — . Market  Price 

♦  Management  for  Lotus  Notes  ♦  Management  for  Exchange 
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Unicenter 


THE  BEST  INFRASTRUCTURE  MANAGEMENT  SOFTWARE. 
AVAILABLE  A  LA  CARTE.  BON  APPETIT. 


In  infrastructure  management,  no  two  appetites  are  alike.  That's  why  Unicenter  lets  you  choose 
only  the  components  you  need,  just  when  you  need  them.  Of  course,  it's  also  still  available  prix  fixe. 
Regardless,  the  individual  elements  will  work  together  seamlessly.  So  you  can  build  end-to-end 
infrastructure  management  solutions  for  your  business  without  biting  off  more  than  you  can  chew. 


Computer  Associates™ 


TOMORROW 


WE  ARE  COMPUTER  ASSOCIATES 


THE  SOFTWARE  THAT  MANAGES  eBUSINESS'" 


ca.com/unicenter 
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